Overview

overview

10

Static

static

3

4d9810bcdc...18.dll

windows7-x64

10

4d9810bcdc...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d9810bcdc87117c5d16b22370d3be89_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240716-kqc18axaqd

  • MD5

    4d9810bcdc87117c5d16b22370d3be89

  • SHA1

    91e1b3b035521ea6a3a989c4e0930926704de672

  • SHA256

    b4418dc00381089e32d75414a3f31d823d3cb08f7066b4f7ec1aac34e77f1fb2

  • SHA512

    7bd922b367d66db8029ac4068f1393ff70cf365d3fa0acd3ba7500492650cd84d248ec776b8070ba9a2f713a71e44c020582d2b05780fd776d9078234849ed09

  • SSDEEP

    98304:d8qPoBhz1aRxcSU9k36SAEdhvxWa9P593R8yAVp2H:d8qPe1Cxcfk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      4d9810bcdc87117c5d16b22370d3be89_JaffaCakes118

    • Size

      5.0MB

    • MD5

      4d9810bcdc87117c5d16b22370d3be89

    • SHA1

      91e1b3b035521ea6a3a989c4e0930926704de672

    • SHA256

      b4418dc00381089e32d75414a3f31d823d3cb08f7066b4f7ec1aac34e77f1fb2

    • SHA512

      7bd922b367d66db8029ac4068f1393ff70cf365d3fa0acd3ba7500492650cd84d248ec776b8070ba9a2f713a71e44c020582d2b05780fd776d9078234849ed09

    • SSDEEP

      98304:d8qPoBhz1aRxcSU9k36SAEdhvxWa9P593R8yAVp2H:d8qPe1Cxcfk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3266) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks