Overview

overview

10

Static

static

3

ab9a8b1342...18.dll

windows7-x64

10

ab9a8b1342...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab9a8b13426052f871ad2473ca727445_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240614-1lzbna1cnn

  • MD5

    ab9a8b13426052f871ad2473ca727445

  • SHA1

    402bad956a2c54c8f4b32d255df723fc9f297089

  • SHA256

    eeb4d095615c2faa4a25c9d3ddd7e056c0f1a596917f48d4351e0fed2040685c

  • SHA512

    6ab7ae1803632b5e348614a71b58c240274da09192ece086108b70f340ce4afa4dd2836e8749e10e87def27da6928949a07ded505fc1ffa21e976f72b50b95c6

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdd1HkQo6SAARdhnvx:+DqPoBhz1aRxcSUZk36SAEdhvx

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      ab9a8b13426052f871ad2473ca727445_JaffaCakes118

    • Size

      5.0MB

    • MD5

      ab9a8b13426052f871ad2473ca727445

    • SHA1

      402bad956a2c54c8f4b32d255df723fc9f297089

    • SHA256

      eeb4d095615c2faa4a25c9d3ddd7e056c0f1a596917f48d4351e0fed2040685c

    • SHA512

      6ab7ae1803632b5e348614a71b58c240274da09192ece086108b70f340ce4afa4dd2836e8749e10e87def27da6928949a07ded505fc1ffa21e976f72b50b95c6

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdd1HkQo6SAARdhnvx:+DqPoBhz1aRxcSUZk36SAEdhvx

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2658) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks