Overview

overview

10

Static

static

3

85c233320a...18.dll

windows7-x64

10

85c233320a...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85c233320aca3c5a4546710283d8a850_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240531-c5y81acc8s

  • MD5

    85c233320aca3c5a4546710283d8a850

  • SHA1

    1be3aa2014984ff46f178a4737ba71f8778900cb

  • SHA256

    27085d18e0a778466c48612ba42f2b476c6924e0ad163d220d1bd5c08d5ce61c

  • SHA512

    6c2b30f327e7311d66472897e680174f4262e48d27bd0e8cdbe8a04dc014ba2510af385bf00601b300451876353c0f8446448bf410944b41fe0ca888c523413e

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmi:SnAQqMSPbcBVQej/1INRx+TSqTdX1

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      85c233320aca3c5a4546710283d8a850_JaffaCakes118

    • Size

      5.0MB

    • MD5

      85c233320aca3c5a4546710283d8a850

    • SHA1

      1be3aa2014984ff46f178a4737ba71f8778900cb

    • SHA256

      27085d18e0a778466c48612ba42f2b476c6924e0ad163d220d1bd5c08d5ce61c

    • SHA512

      6c2b30f327e7311d66472897e680174f4262e48d27bd0e8cdbe8a04dc014ba2510af385bf00601b300451876353c0f8446448bf410944b41fe0ca888c523413e

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmi:SnAQqMSPbcBVQej/1INRx+TSqTdX1

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3189) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks