Overview

overview

10

Static

static

3

b325f5b31f...18.dll

windows7-x64

10

b325f5b31f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b325f5b31f894f5c5292d7dafc95e563_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240616-m19jaavblp

  • MD5

    b325f5b31f894f5c5292d7dafc95e563

  • SHA1

    817d98c51fb829f295b5524beddef41ae7bcbcbd

  • SHA256

    fe1e65b62cd7d316362f47bf5edb24f97c791ebc391011e221df8b8ebef7016a

  • SHA512

    4642b86eff510a8effba55fac1b4cefbb4d03afc2334169ab2c5563ccbb44444315d2429cc33608afe7523968456447278502b42dc731dad0347c432adfeb8b9

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAfSIfb:+DqPoBhz1aRxcSUDk36SAyB

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      b325f5b31f894f5c5292d7dafc95e563_JaffaCakes118

    • Size

      5.0MB

    • MD5

      b325f5b31f894f5c5292d7dafc95e563

    • SHA1

      817d98c51fb829f295b5524beddef41ae7bcbcbd

    • SHA256

      fe1e65b62cd7d316362f47bf5edb24f97c791ebc391011e221df8b8ebef7016a

    • SHA512

      4642b86eff510a8effba55fac1b4cefbb4d03afc2334169ab2c5563ccbb44444315d2429cc33608afe7523968456447278502b42dc731dad0347c432adfeb8b9

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAfSIfb:+DqPoBhz1aRxcSUDk36SAyB

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2658) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks