Overview

overview

10

Static

static

3

8ccf718645...18.dll

windows7-x64

10

8ccf718645...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ccf7186457ef4c6b372d6054d689cc8_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240602-egd92aaf64

  • MD5

    8ccf7186457ef4c6b372d6054d689cc8

  • SHA1

    792b666fa116514853768e023f0b7c91192e3c84

  • SHA256

    8586e3c76dfc9508e5f673b60c4074bc350975818bfc4341f52d3d2e21c9df37

  • SHA512

    592f5ecacdec4dc95d1fe920399d583bbef60a16251d03bea338f607906baaad340891d41f1d3485487e0434079e017cda2741c64a01d3f6e6e8ce07666459b3

  • SSDEEP

    49152:SnAQqMSPbcBVAx+TSqTdX1HkQo6SAARdhnvxJM0H9:+DqPoBKxcSUDk36SAEdhvxWa9

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      8ccf7186457ef4c6b372d6054d689cc8_JaffaCakes118

    • Size

      5.0MB

    • MD5

      8ccf7186457ef4c6b372d6054d689cc8

    • SHA1

      792b666fa116514853768e023f0b7c91192e3c84

    • SHA256

      8586e3c76dfc9508e5f673b60c4074bc350975818bfc4341f52d3d2e21c9df37

    • SHA512

      592f5ecacdec4dc95d1fe920399d583bbef60a16251d03bea338f607906baaad340891d41f1d3485487e0434079e017cda2741c64a01d3f6e6e8ce07666459b3

    • SSDEEP

      49152:SnAQqMSPbcBVAx+TSqTdX1HkQo6SAARdhnvxJM0H9:+DqPoBKxcSUDk36SAEdhvxWa9

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3252) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks