Overview

overview

10

Static

static

3

927bad2fc8...18.dll

windows7-x64

10

927bad2fc8...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    927bad2fc8fd2801ca6603b230a86281_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240603-t7nnqacf5x

  • MD5

    927bad2fc8fd2801ca6603b230a86281

  • SHA1

    cacfee040cd0155d3fdf5bac151c567a267f82cd

  • SHA256

    711f13e735fe74a3c8521f02451ce86a716961bbe21dbf78dba14acb31d6741c

  • SHA512

    4db14f8a0c740e98edc51457185fbe356319b4fcf25983bd91f4a3e341b0a0d74f4f76489e0fae1efe53db402fa8ee9d382e1e2000c4e73ba780b6b388b61830

  • SSDEEP

    98304:TDqPoBhz1aRxcSUDk36SAExWa9P5MyAVp2H:TDqPe1Cxcxk3ZAHadmyc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      927bad2fc8fd2801ca6603b230a86281_JaffaCakes118

    • Size

      5.0MB

    • MD5

      927bad2fc8fd2801ca6603b230a86281

    • SHA1

      cacfee040cd0155d3fdf5bac151c567a267f82cd

    • SHA256

      711f13e735fe74a3c8521f02451ce86a716961bbe21dbf78dba14acb31d6741c

    • SHA512

      4db14f8a0c740e98edc51457185fbe356319b4fcf25983bd91f4a3e341b0a0d74f4f76489e0fae1efe53db402fa8ee9d382e1e2000c4e73ba780b6b388b61830

    • SSDEEP

      98304:TDqPoBhz1aRxcSUDk36SAExWa9P5MyAVp2H:TDqPe1Cxcxk3ZAHadmyc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3314) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks