Overview

overview

10

Static

static

3

87b890c975...18.dll

windows7-x64

10

87b890c975...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    87b890c975572f72518ab865ade2dd8f_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240531-vkmzcaeg3v

  • MD5

    87b890c975572f72518ab865ade2dd8f

  • SHA1

    8153bb85ca45b30adb7b137eceb70c46375d459c

  • SHA256

    849f85bf8cae249229bca8d6905a0964eb29afa3bd4e53a804a6d38ebcc72b66

  • SHA512

    2e8030c56761ac51ca3cfa88d524f6befcc65f097fec287d77748a7c1088491a54775352037b43053b9a6e5710b491ceceec9e12839e15eac497715efc2b39f1

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      87b890c975572f72518ab865ade2dd8f_JaffaCakes118

    • Size

      5.0MB

    • MD5

      87b890c975572f72518ab865ade2dd8f

    • SHA1

      8153bb85ca45b30adb7b137eceb70c46375d459c

    • SHA256

      849f85bf8cae249229bca8d6905a0964eb29afa3bd4e53a804a6d38ebcc72b66

    • SHA512

      2e8030c56761ac51ca3cfa88d524f6befcc65f097fec287d77748a7c1088491a54775352037b43053b9a6e5710b491ceceec9e12839e15eac497715efc2b39f1

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3132) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks