Overview

overview

10

Static

static

3

93da20793d...18.dll

windows7-x64

10

93da20793d...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93da20793dcecca1f9cbccd3b3de8ba1_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240604-g46c5sge23

  • MD5

    93da20793dcecca1f9cbccd3b3de8ba1

  • SHA1

    606b2f5cfd4296762de9b767342df97412fb7cf4

  • SHA256

    6f73d23dc235b9255b394a96f5d01e4d0040b72b1b727d459885a1d92e6b5235

  • SHA512

    87a729c025efdf011464256068ad253b6cfecf8d75e94512cf29d4bfb95b8f6068cf64fe48aced6ac01bf08a734f9765789470d5e57207354dcd85a6a5e8bd55

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:+DqPoBhz1aRxcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      93da20793dcecca1f9cbccd3b3de8ba1_JaffaCakes118

    • Size

      5.0MB

    • MD5

      93da20793dcecca1f9cbccd3b3de8ba1

    • SHA1

      606b2f5cfd4296762de9b767342df97412fb7cf4

    • SHA256

      6f73d23dc235b9255b394a96f5d01e4d0040b72b1b727d459885a1d92e6b5235

    • SHA512

      87a729c025efdf011464256068ad253b6cfecf8d75e94512cf29d4bfb95b8f6068cf64fe48aced6ac01bf08a734f9765789470d5e57207354dcd85a6a5e8bd55

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:+DqPoBhz1aRxcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3310) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks