Overview

overview

10

Static

static

3

990f73bbf4...18.dll

windows7-x64

10

990f73bbf4...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    990f73bbf44003622e25184a6d13ca62_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240605-ygk75agf74

  • MD5

    990f73bbf44003622e25184a6d13ca62

  • SHA1

    300d30543265c955b532dd38074eed864b35b0f8

  • SHA256

    6bd1e8f395f25533915234f0c2cda00baf0ae1dc6665407d6b51b6eae0485d47

  • SHA512

    b64f77f6e7e4f257c6d921a80674e1e1502747843461dd095d3d5284a7ff28a3030bc714e5616ea9a686f358b9d749eb645aa08df3e6b2ae8e9db5c817af5149

  • SSDEEP

    49152:SnAQqMSPbcBVX1INRx+TSqTdOxJM0H9PAMEcaEau3R8yAH1plAH:+DqPoBF1aRxcSUwxWa9P593R8yAVp2H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      990f73bbf44003622e25184a6d13ca62_JaffaCakes118

    • Size

      5.0MB

    • MD5

      990f73bbf44003622e25184a6d13ca62

    • SHA1

      300d30543265c955b532dd38074eed864b35b0f8

    • SHA256

      6bd1e8f395f25533915234f0c2cda00baf0ae1dc6665407d6b51b6eae0485d47

    • SHA512

      b64f77f6e7e4f257c6d921a80674e1e1502747843461dd095d3d5284a7ff28a3030bc714e5616ea9a686f358b9d749eb645aa08df3e6b2ae8e9db5c817af5149

    • SSDEEP

      49152:SnAQqMSPbcBVX1INRx+TSqTdOxJM0H9PAMEcaEau3R8yAH1plAH:+DqPoBF1aRxcSUwxWa9P593R8yAVp2H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3115) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks