Overview

overview

10

Static

static

3

42708471bb...18.dll

windows7-x64

10

42708471bb...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42708471bba43fab8c0834de27a7a3a4_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240713-tvbtdsyanp

  • MD5

    42708471bba43fab8c0834de27a7a3a4

  • SHA1

    9a87f4a8ce7bfb5e9dda353a0a308f228353bcfe

  • SHA256

    46d23bc35d038fbeaf2c3e86a89c42319560e8a6a4a3fd3bd743d96f2b49f238

  • SHA512

    bae3fe3021fe0ef0f5a16e9db9a51630daac987c984f673aabab6cd14bf6f88855699c71b6ff97322dbd08e1c5e1c861d7dc117095ad372525d75e8abd47906d

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:+DqPe1Cxcxk3ZAEUadzR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      42708471bba43fab8c0834de27a7a3a4_JaffaCakes118

    • Size

      5.0MB

    • MD5

      42708471bba43fab8c0834de27a7a3a4

    • SHA1

      9a87f4a8ce7bfb5e9dda353a0a308f228353bcfe

    • SHA256

      46d23bc35d038fbeaf2c3e86a89c42319560e8a6a4a3fd3bd743d96f2b49f238

    • SHA512

      bae3fe3021fe0ef0f5a16e9db9a51630daac987c984f673aabab6cd14bf6f88855699c71b6ff97322dbd08e1c5e1c861d7dc117095ad372525d75e8abd47906d

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:+DqPe1Cxcxk3ZAEUadzR8yc4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3179) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks