Overview

overview

10

Static

static

3

a224f55dd5...18.dll

windows7-x64

10

a224f55dd5...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a224f55dd526688e4a378e8b7c5c147b_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240612-yxjdgayckf

  • MD5

    a224f55dd526688e4a378e8b7c5c147b

  • SHA1

    0ecc4f4e6c3b32466fc52ccad4694c9fa243b612

  • SHA256

    bb9d030583fc0fd55a9ce8bf09176eec01f950512f10951529f88ebbe7ac8d2b

  • SHA512

    06df1063c05b3ba1fb4c42b480a98879ef0de952a70776986652040f06a54fed8cb36c8cbe1f793c90521e6a71f4e8ad66c1bafbc2ae8e30045431eb9593e804

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0QeQjG8Y/L9RZ:SnAQqMSPbcBVQejf/L9RZ

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      a224f55dd526688e4a378e8b7c5c147b_JaffaCakes118

    • Size

      5.0MB

    • MD5

      a224f55dd526688e4a378e8b7c5c147b

    • SHA1

      0ecc4f4e6c3b32466fc52ccad4694c9fa243b612

    • SHA256

      bb9d030583fc0fd55a9ce8bf09176eec01f950512f10951529f88ebbe7ac8d2b

    • SHA512

      06df1063c05b3ba1fb4c42b480a98879ef0de952a70776986652040f06a54fed8cb36c8cbe1f793c90521e6a71f4e8ad66c1bafbc2ae8e30045431eb9593e804

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0QeQjG8Y/L9RZ:SnAQqMSPbcBVQejf/L9RZ

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3123) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks