Overview

overview

10

Static

static

3

8d92dd7468...18.dll

windows7-x64

10

8d92dd7468...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d92dd74686187bf411fc0898848d77f_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240602-k61gfsgh7s

  • MD5

    8d92dd74686187bf411fc0898848d77f

  • SHA1

    e685f2473c65ff02e897ed428a335222b7f8149d

  • SHA256

    7cf6d0543975e3f4c2b0feae75fee701aa37f3ea441c575ad45e808d4ccdc089

  • SHA512

    e50852922f4e14592e8cae486d7186c65327b3b9bf6e01038beae2606f020ea593fa145dafadfbfb9c9445cea0e86b292f6e1cc6f2d0134bc4005fa4e8ce5a37

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SA9hvxWa9P593R8yAVp2H:+DqPe1Cxcxk3ZA0adzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      8d92dd74686187bf411fc0898848d77f_JaffaCakes118

    • Size

      5.0MB

    • MD5

      8d92dd74686187bf411fc0898848d77f

    • SHA1

      e685f2473c65ff02e897ed428a335222b7f8149d

    • SHA256

      7cf6d0543975e3f4c2b0feae75fee701aa37f3ea441c575ad45e808d4ccdc089

    • SHA512

      e50852922f4e14592e8cae486d7186c65327b3b9bf6e01038beae2606f020ea593fa145dafadfbfb9c9445cea0e86b292f6e1cc6f2d0134bc4005fa4e8ce5a37

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SA9hvxWa9P593R8yAVp2H:+DqPe1Cxcxk3ZA0adzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3271) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks