Overview

overview

10

Static

static

3

9d81c50361...18.dll

windows7-x64

10

9d81c50361...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d81c50361a2ef2b18c754eb9625143c_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240611-jxz9nazhkn

  • MD5

    9d81c50361a2ef2b18c754eb9625143c

  • SHA1

    ae6bcee32bfbdb752061e24b5a39a2821d13594a

  • SHA256

    d93476e8a77436c20fbd4c27ed2eea9508b65e9c89a15eeae3f327cbb211c4db

  • SHA512

    0f5f7c073a550df1944b46517416dda1877ecdb18facd553d571a2d9682c8808a3cb916aff25fdf245b91c7883100eefbc4f1cbd0613282add652bf05170a72a

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0HY:+DqPoBhz1aRxcSUDk36SAEdhvxWa

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      9d81c50361a2ef2b18c754eb9625143c_JaffaCakes118

    • Size

      5.0MB

    • MD5

      9d81c50361a2ef2b18c754eb9625143c

    • SHA1

      ae6bcee32bfbdb752061e24b5a39a2821d13594a

    • SHA256

      d93476e8a77436c20fbd4c27ed2eea9508b65e9c89a15eeae3f327cbb211c4db

    • SHA512

      0f5f7c073a550df1944b46517416dda1877ecdb18facd553d571a2d9682c8808a3cb916aff25fdf245b91c7883100eefbc4f1cbd0613282add652bf05170a72a

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0HY:+DqPoBhz1aRxcSUDk36SAEdhvxWa

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2673) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks