Overview

overview

10

Static

static

3

bc2698181f...18.dll

windows7-x64

10

bc2698181f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc2698181fe7aee34c424010f2eca343_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240618-qmenjazann

  • MD5

    bc2698181fe7aee34c424010f2eca343

  • SHA1

    86f7cef7a95398f1a37e706003dc6550242ecae2

  • SHA256

    f18d4022690fbfb444b4b2f839eac00535a77e6e572ce734596d9443d76c3b7c

  • SHA512

    7110756f7cacce693064b02776af34208432618e1c0fa85619d49ae69fdca801cb25eee051872030219016d096071de46bbeedb2d2495c8b70324f0505b9648a

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SALEau3:+DqPoBhz1aRxcSUDk36SAy3

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      bc2698181fe7aee34c424010f2eca343_JaffaCakes118

    • Size

      5.0MB

    • MD5

      bc2698181fe7aee34c424010f2eca343

    • SHA1

      86f7cef7a95398f1a37e706003dc6550242ecae2

    • SHA256

      f18d4022690fbfb444b4b2f839eac00535a77e6e572ce734596d9443d76c3b7c

    • SHA512

      7110756f7cacce693064b02776af34208432618e1c0fa85619d49ae69fdca801cb25eee051872030219016d096071de46bbeedb2d2495c8b70324f0505b9648a

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SALEau3:+DqPoBhz1aRxcSUDk36SAy3

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3185) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks