Overview

overview

10

Static

static

3

b12f2bd322...18.dll

windows7-x64

10

b12f2bd322...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b12f2bd32267fcb3cfd0a96eca39500e_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240616-b86xksvbkf

  • MD5

    b12f2bd32267fcb3cfd0a96eca39500e

  • SHA1

    e5ac663773e796118c7dedf5fba0bd5c2792b566

  • SHA256

    84a4c8ba9eaf10dbc9a9a0e29d69edcb4b180bb60d406db1cc8a827bf32abafd

  • SHA512

    531cc6ae5cd8b922d258f80c522e05f1150553c656ce06282016f0e548a7828aee888180c7bffa18590cbf14a51371176d938c05ce785ee1ab3d68cd8ea92dfa

  • SSDEEP

    98304:d8qPoBhz1VxcSUDk36SAEdhvxWa9P593R8yA:d8qPe1Vxcxk3ZAEUadzR8y

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      b12f2bd32267fcb3cfd0a96eca39500e_JaffaCakes118

    • Size

      5.0MB

    • MD5

      b12f2bd32267fcb3cfd0a96eca39500e

    • SHA1

      e5ac663773e796118c7dedf5fba0bd5c2792b566

    • SHA256

      84a4c8ba9eaf10dbc9a9a0e29d69edcb4b180bb60d406db1cc8a827bf32abafd

    • SHA512

      531cc6ae5cd8b922d258f80c522e05f1150553c656ce06282016f0e548a7828aee888180c7bffa18590cbf14a51371176d938c05ce785ee1ab3d68cd8ea92dfa

    • SSDEEP

      98304:d8qPoBhz1VxcSUDk36SAEdhvxWa9P593R8yA:d8qPe1Vxcxk3ZAEUadzR8y

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3185) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks