Overview

overview

10

Static

static

3

8ab9de65ac...18.dll

windows7-x64

10

8ab9de65ac...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ab9de65ac04fddfd3425fd2903cd975_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240601-rp8j3afc45

  • MD5

    8ab9de65ac04fddfd3425fd2903cd975

  • SHA1

    fd5329e59a23abff85b8b47e9a73d5f64209d92c

  • SHA256

    f311c50591e8685fc12a666f7fc43b08271f0af75013ede94a81d555d1f1fc7e

  • SHA512

    6f51ba3c9dc60da349c2853d983b4f8e4806caa49126966b4c1baf890239936c7fded00803f0e7908df92f1ec6f30ba64a41e8298c7ffbbb2fccc605ffcce271

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:+DqPe1Cxcxk3ZAEUadzR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      8ab9de65ac04fddfd3425fd2903cd975_JaffaCakes118

    • Size

      5.0MB

    • MD5

      8ab9de65ac04fddfd3425fd2903cd975

    • SHA1

      fd5329e59a23abff85b8b47e9a73d5f64209d92c

    • SHA256

      f311c50591e8685fc12a666f7fc43b08271f0af75013ede94a81d555d1f1fc7e

    • SHA512

      6f51ba3c9dc60da349c2853d983b4f8e4806caa49126966b4c1baf890239936c7fded00803f0e7908df92f1ec6f30ba64a41e8298c7ffbbb2fccc605ffcce271

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:+DqPe1Cxcxk3ZAEUadzR8yc4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3194) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks