Overview

overview

10

Static

static

3

b22b6d701e...18.dll

windows7-x64

10

b22b6d701e...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b22b6d701e2a273e7de63b84050f082c_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240616-hejzaaxcpq

  • MD5

    b22b6d701e2a273e7de63b84050f082c

  • SHA1

    38048d68ea12dac1e44d37eb8ff60b73949fac25

  • SHA256

    4410461ac4c1e7c17d78d3b60e2eacbcbfeddd208c9b752613797f8a8058bdc5

  • SHA512

    f6b0e5018899f161de4c80b07c655476321dea65c4a5e4288904b678f43ba0f9bade258cf3cfc74b1c45a65a16717b89f7985a36bf73b4054b35f3138c568261

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhx93R8yAVp2:+DqPe1Cxcxk3ZAEnR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      b22b6d701e2a273e7de63b84050f082c_JaffaCakes118

    • Size

      5.0MB

    • MD5

      b22b6d701e2a273e7de63b84050f082c

    • SHA1

      38048d68ea12dac1e44d37eb8ff60b73949fac25

    • SHA256

      4410461ac4c1e7c17d78d3b60e2eacbcbfeddd208c9b752613797f8a8058bdc5

    • SHA512

      f6b0e5018899f161de4c80b07c655476321dea65c4a5e4288904b678f43ba0f9bade258cf3cfc74b1c45a65a16717b89f7985a36bf73b4054b35f3138c568261

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhx93R8yAVp2:+DqPe1Cxcxk3ZAEnR8yc4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3188) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks