Overview

overview

10

Static

static

3

47cb345c8f...18.dll

windows7-x64

10

47cb345c8f...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    47cb345c8f7850274d485d98345b5ddd_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240715-cplb7stbrl

  • MD5

    47cb345c8f7850274d485d98345b5ddd

  • SHA1

    c4f0e83f39030ed5c43041ac2edce7167859f6e6

  • SHA256

    b4f1d2ac45324ec816f0b5bc9ccfecb77324a312f48a36a3c71ae9477668a513

  • SHA512

    bd39caf1246fdac03387e7938944e66f82966f08969752a817f221486ec5c8a5f6a3b984407df2e2a108076eed5d939172a452bfc834bfd2a66014f04aa47634

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P53DIe2sDg2y8KMfd:+DqPe1Cxcxk3ZAEUadZDbVDzy8KI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      47cb345c8f7850274d485d98345b5ddd_JaffaCakes118

    • Size

      5.0MB

    • MD5

      47cb345c8f7850274d485d98345b5ddd

    • SHA1

      c4f0e83f39030ed5c43041ac2edce7167859f6e6

    • SHA256

      b4f1d2ac45324ec816f0b5bc9ccfecb77324a312f48a36a3c71ae9477668a513

    • SHA512

      bd39caf1246fdac03387e7938944e66f82966f08969752a817f221486ec5c8a5f6a3b984407df2e2a108076eed5d939172a452bfc834bfd2a66014f04aa47634

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P53DIe2sDg2y8KMfd:+DqPe1Cxcxk3ZAEUadZDbVDzy8KI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3272) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks