Overview

overview

10

Static

static

3

abae35df22...18.dll

windows7-x64

10

abae35df22...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abae35df2210d9521a8bc0ba08b97113_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240614-111g9sxgng

  • MD5

    abae35df2210d9521a8bc0ba08b97113

  • SHA1

    02cd4366ecde1ccd8833d7853dcf80c00305dead

  • SHA256

    8a0abfca4e451c4f0f3c693eb52331954573384bfd902ee325118d85a7e22dc3

  • SHA512

    b36c47d647109633c256dad766ff0ee846114f81b9921494048dfe68cb5561dabcdd051ff979774ce74a871ba46ad78a2718b67de70be8b5039d26999e24c79e

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhUP593R8yAVp2H:+DqPe1Cxcxk3ZAESzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      abae35df2210d9521a8bc0ba08b97113_JaffaCakes118

    • Size

      5.0MB

    • MD5

      abae35df2210d9521a8bc0ba08b97113

    • SHA1

      02cd4366ecde1ccd8833d7853dcf80c00305dead

    • SHA256

      8a0abfca4e451c4f0f3c693eb52331954573384bfd902ee325118d85a7e22dc3

    • SHA512

      b36c47d647109633c256dad766ff0ee846114f81b9921494048dfe68cb5561dabcdd051ff979774ce74a871ba46ad78a2718b67de70be8b5039d26999e24c79e

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhUP593R8yAVp2H:+DqPe1Cxcxk3ZAESzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3240) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks