Overview

overview

10

Static

static

3

b918c4f4ec...18.dll

windows7-x64

10

b918c4f4ec...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b918c4f4ec5726ee9537c7a850d59b03_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240617-vvzqws1dqp

  • MD5

    b918c4f4ec5726ee9537c7a850d59b03

  • SHA1

    b1decbe1bd8753355d467f64b7c781e489869a32

  • SHA256

    35c02c4e411114e6f7abadad47b55d510b487e160a7c9ff477d6c10b48d7d5d4

  • SHA512

    16cd328a5914919b263f142d84cca399a3fa5a21b332add63d0c2ee1f1be76a81f5412c6a7c9773f398c8ff927aba6e9d7c4ad15ad95e4c919dd48d0f6f1b154

  • SSDEEP

    24576:zbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626uMEcpcL7nEaut/86:znAQqMSPbcBVQej/1INRbMEcaEau3

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      b918c4f4ec5726ee9537c7a850d59b03_JaffaCakes118

    • Size

      5.0MB

    • MD5

      b918c4f4ec5726ee9537c7a850d59b03

    • SHA1

      b1decbe1bd8753355d467f64b7c781e489869a32

    • SHA256

      35c02c4e411114e6f7abadad47b55d510b487e160a7c9ff477d6c10b48d7d5d4

    • SHA512

      16cd328a5914919b263f142d84cca399a3fa5a21b332add63d0c2ee1f1be76a81f5412c6a7c9773f398c8ff927aba6e9d7c4ad15ad95e4c919dd48d0f6f1b154

    • SSDEEP

      24576:zbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626uMEcpcL7nEaut/86:znAQqMSPbcBVQej/1INRbMEcaEau3

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2668) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks