Overview

overview

10

Static

static

3

8a5f1c167c...18.dll

windows7-x64

10

8a5f1c167c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a5f1c167c3450e13e06ecab6be7838a_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240601-nwlr4abe3y

  • MD5

    8a5f1c167c3450e13e06ecab6be7838a

  • SHA1

    87db1835f6b7e4a1d2e3bf6a9f889d922a5ed213

  • SHA256

    2e9d8ca583fdeff7bdec78d707d322cab949a22fd487bce721a2ad2b8d8a548f

  • SHA512

    9df93ab449855b631084c785f00ccfb4b508a8d22d451914114c49515248fc359011be5715f39c3119e69a571e13fd1961b6de69e81347c0e181248ab7eeb063

  • SSDEEP

    49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9PAM:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      8a5f1c167c3450e13e06ecab6be7838a_JaffaCakes118

    • Size

      5.0MB

    • MD5

      8a5f1c167c3450e13e06ecab6be7838a

    • SHA1

      87db1835f6b7e4a1d2e3bf6a9f889d922a5ed213

    • SHA256

      2e9d8ca583fdeff7bdec78d707d322cab949a22fd487bce721a2ad2b8d8a548f

    • SHA512

      9df93ab449855b631084c785f00ccfb4b508a8d22d451914114c49515248fc359011be5715f39c3119e69a571e13fd1961b6de69e81347c0e181248ab7eeb063

    • SSDEEP

      49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9PAM:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3116) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks