Overview

overview

10

Static

static

3

47765f90c0...18.dll

windows7-x64

10

47765f90c0...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47765f90c0fb0320afb71996d787206e_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240715-axnfeszcpk

  • MD5

    47765f90c0fb0320afb71996d787206e

  • SHA1

    8dbc1243d4b0c8cda1d483d7386bc30cb29e5482

  • SHA256

    e58460224496dbc08ff03c6162cf20e6e5b0b7e38acd0e6fec4003a6a090eb2e

  • SHA512

    87ddb73ffbf29399f5cafd1772ad84c88108bb96c736df75c2b0753d000cc0bf813267cd3b356e28dfc855c87182fbee2abc491629dda38a160e10b4f7a8191e

  • SSDEEP

    12288:T1bLgmluCti62WfSm0iEcQhfYNvrTcbckPU82900Ve7zw+K+DH:RbLguriIfEcQdIvrYbcMNgef0Q

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      47765f90c0fb0320afb71996d787206e_JaffaCakes118

    • Size

      5.0MB

    • MD5

      47765f90c0fb0320afb71996d787206e

    • SHA1

      8dbc1243d4b0c8cda1d483d7386bc30cb29e5482

    • SHA256

      e58460224496dbc08ff03c6162cf20e6e5b0b7e38acd0e6fec4003a6a090eb2e

    • SHA512

      87ddb73ffbf29399f5cafd1772ad84c88108bb96c736df75c2b0753d000cc0bf813267cd3b356e28dfc855c87182fbee2abc491629dda38a160e10b4f7a8191e

    • SSDEEP

      12288:T1bLgmluCti62WfSm0iEcQhfYNvrTcbckPU82900Ve7zw+K+DH:RbLguriIfEcQdIvrYbcMNgef0Q

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2095) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks