Overview

overview

10

Static

static

3

a52d8bc24a...18.exe

windows7-x64

10

a52d8bc24a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a52d8bc24a91c730365f0cc974e13008_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240613-m1y3jszdlm

  • MD5

    a52d8bc24a91c730365f0cc974e13008

  • SHA1

    d296048a22e14aa57688a439911c3309b982c0d1

  • SHA256

    aa2024e1e6e1e024f916cbb67c0f6bb5f17dc6a719cd1ffc4735e3ac1c1031b6

  • SHA512

    6cc576469c7261fa64bb5da101bd2ede6b599e4cf2ea4a836d62e3b458d57d7e44f56c1241450f61049d963954d059a855018837d261cf7329a257137bb33c2a

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P5Zkvft6yAVp2HI:yDqPe1Cxcxk3ZAEUadY6yc4HI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      a52d8bc24a91c730365f0cc974e13008_JaffaCakes118

    • Size

      3.6MB

    • MD5

      a52d8bc24a91c730365f0cc974e13008

    • SHA1

      d296048a22e14aa57688a439911c3309b982c0d1

    • SHA256

      aa2024e1e6e1e024f916cbb67c0f6bb5f17dc6a719cd1ffc4735e3ac1c1031b6

    • SHA512

      6cc576469c7261fa64bb5da101bd2ede6b599e4cf2ea4a836d62e3b458d57d7e44f56c1241450f61049d963954d059a855018837d261cf7329a257137bb33c2a

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P5Zkvft6yAVp2HI:yDqPe1Cxcxk3ZAEUadY6yc4HI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3121) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks