Overview

overview

10

Static

static

3

bc4bfce53f...18.dll

windows7-x64

10

bc4bfce53f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc4bfce53fe8ed95f14980900a2e10a7_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240618-q73wvs1ajq

  • MD5

    bc4bfce53fe8ed95f14980900a2e10a7

  • SHA1

    e13ea4fad6cc988e0acd58fa252efd4f80b58bb6

  • SHA256

    69cf10f44f26135d7144419d57632d4d37d7a3e0e83c0ffbbeb326f1bf72566a

  • SHA512

    aebeca254bfa808f0c704ce30b20769926d224acfddfbe31056d7fe8a87325b7edf851612dc46dd74a8e1f3662dab72e2353976e26a20b377128b7596eed0709

  • SSDEEP

    49152:SnAQqMSPbcBVPINRx+TSqTdX1HkQo6SAARdhnYAMEcaEau3R8:+DqPoBRaRxcSUDk36SAEdhY593R8

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      bc4bfce53fe8ed95f14980900a2e10a7_JaffaCakes118

    • Size

      5.0MB

    • MD5

      bc4bfce53fe8ed95f14980900a2e10a7

    • SHA1

      e13ea4fad6cc988e0acd58fa252efd4f80b58bb6

    • SHA256

      69cf10f44f26135d7144419d57632d4d37d7a3e0e83c0ffbbeb326f1bf72566a

    • SHA512

      aebeca254bfa808f0c704ce30b20769926d224acfddfbe31056d7fe8a87325b7edf851612dc46dd74a8e1f3662dab72e2353976e26a20b377128b7596eed0709

    • SSDEEP

      49152:SnAQqMSPbcBVPINRx+TSqTdX1HkQo6SAARdhnYAMEcaEau3R8:+DqPoBRaRxcSUDk36SAEdhY593R8

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3264) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks