Overview

overview

10

Static

static

3

b28c928b37...18.dll

windows7-x64

10

b28c928b37...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b28c928b3771452c46377792932e0548_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240616-j9gcbawfkf

  • MD5

    b28c928b3771452c46377792932e0548

  • SHA1

    dc88d6186cb3d8a545d8da8ae8621d7bb4b7a960

  • SHA256

    9611482523c3c6b8f4d33ce3bb921d3ee8b466435b74982c912c20e47951e479

  • SHA512

    5e9cc140ced61a4e78bcb94187fadd3006dac7d3ba2e02f77d132e9985a8aafa2fe8fa38b25207b224a3cb94f503cc63df3af1062562789b7d88e8a6cc8c95ba

  • SSDEEP

    98304:+DqPoBhz1asSbevWSdOLZsxWxPebdWPp2:+DqPe1ubNiOLFwbd64

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      b28c928b3771452c46377792932e0548_JaffaCakes118

    • Size

      5.0MB

    • MD5

      b28c928b3771452c46377792932e0548

    • SHA1

      dc88d6186cb3d8a545d8da8ae8621d7bb4b7a960

    • SHA256

      9611482523c3c6b8f4d33ce3bb921d3ee8b466435b74982c912c20e47951e479

    • SHA512

      5e9cc140ced61a4e78bcb94187fadd3006dac7d3ba2e02f77d132e9985a8aafa2fe8fa38b25207b224a3cb94f503cc63df3af1062562789b7d88e8a6cc8c95ba

    • SSDEEP

      98304:+DqPoBhz1asSbevWSdOLZsxWxPebdWPp2:+DqPe1ubNiOLFwbd64

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2652) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks