Overview

overview

10

Static

static

3

99ad8aeda4...18.dll

windows7-x64

10

99ad8aeda4...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99ad8aeda4eef76eb75a1a4b7323473d_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240606-bjx85sec72

  • MD5

    99ad8aeda4eef76eb75a1a4b7323473d

  • SHA1

    920bb8782bfa9fd1613f3dd588c27ce367d9700c

  • SHA256

    892aa85369aec7332bbf24998001a8b8ea8e5bb0ad97cc02d041991e25c0ebfa

  • SHA512

    007aa0e7604ecf90a1f6b10566dd85353bb1a2ff586392a2eb1e66aba74e863442497f1098053e8a84be45a0240394ddc2c290824641af4af62eb00eb71be73f

  • SSDEEP

    12288:yebLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHh5vR5CAvg:zbLgddQhfdmMSirYbcMNgef0QB4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      99ad8aeda4eef76eb75a1a4b7323473d_JaffaCakes118

    • Size

      5.0MB

    • MD5

      99ad8aeda4eef76eb75a1a4b7323473d

    • SHA1

      920bb8782bfa9fd1613f3dd588c27ce367d9700c

    • SHA256

      892aa85369aec7332bbf24998001a8b8ea8e5bb0ad97cc02d041991e25c0ebfa

    • SHA512

      007aa0e7604ecf90a1f6b10566dd85353bb1a2ff586392a2eb1e66aba74e863442497f1098053e8a84be45a0240394ddc2c290824641af4af62eb00eb71be73f

    • SSDEEP

      12288:yebLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHh5vR5CAvg:zbLgddQhfdmMSirYbcMNgef0QB4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3196) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks