Overview

overview

10

Static

static

3

bc59684b50...18.dll

windows7-x64

10

bc59684b50...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc59684b5022145c6299f01b984cecd2_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240618-rfqmwsxapb

  • MD5

    bc59684b5022145c6299f01b984cecd2

  • SHA1

    73d27d95025ce81d7d37a305568a1349c8c03940

  • SHA256

    3d492ae73efacaf4eda545e5ab9ac4da31eb0150e1623b7d80fbacf6343722a1

  • SHA512

    82fd9d854897f7d49b18b8e0197e680b42a4e5a1ee0a8a01dcbf87daa01b147dae3bd18b0cda18e9affe33461bf273017ac9a1c74881bb164503bad3c8ada8a2

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P53AV/:+DqPe1Cxcxk3ZAEUad9A

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      bc59684b5022145c6299f01b984cecd2_JaffaCakes118

    • Size

      5.0MB

    • MD5

      bc59684b5022145c6299f01b984cecd2

    • SHA1

      73d27d95025ce81d7d37a305568a1349c8c03940

    • SHA256

      3d492ae73efacaf4eda545e5ab9ac4da31eb0150e1623b7d80fbacf6343722a1

    • SHA512

      82fd9d854897f7d49b18b8e0197e680b42a4e5a1ee0a8a01dcbf87daa01b147dae3bd18b0cda18e9affe33461bf273017ac9a1c74881bb164503bad3c8ada8a2

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P53AV/:+DqPe1Cxcxk3ZAEUad9A

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2661) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks