Overview

overview

10

Static

static

3

a725bf924d...18.dll

windows7-x64

10

a725bf924d...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a725bf924d21fc981dd173fa66bca35f_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240613-3pj29awblb

  • MD5

    a725bf924d21fc981dd173fa66bca35f

  • SHA1

    c8b034345bbfca6981c3932388a245218cca3d9f

  • SHA256

    b2e147ea73d954d6938434c8f4e3fb68a3eac21d1770e39102f0c21cebb9acbf

  • SHA512

    80b4d0ac7aa24c1a6abc904f7feb46f772e6d0c5307860c62a6de5320a5e1b5568cf49d2e15786241d7171aae12ee29824781b07f330352f95eaf5ed80645ae4

  • SSDEEP

    49152:JnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H:dDqPoBhz1aRxcSUDk36SAEdhvxWa

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      a725bf924d21fc981dd173fa66bca35f_JaffaCakes118

    • Size

      5.0MB

    • MD5

      a725bf924d21fc981dd173fa66bca35f

    • SHA1

      c8b034345bbfca6981c3932388a245218cca3d9f

    • SHA256

      b2e147ea73d954d6938434c8f4e3fb68a3eac21d1770e39102f0c21cebb9acbf

    • SHA512

      80b4d0ac7aa24c1a6abc904f7feb46f772e6d0c5307860c62a6de5320a5e1b5568cf49d2e15786241d7171aae12ee29824781b07f330352f95eaf5ed80645ae4

    • SSDEEP

      49152:JnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H:dDqPoBhz1aRxcSUDk36SAEdhvxWa

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2663) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks