Overview

overview

10

Static

static

3

6778f5c54d...18.dll

windows7-x64

10

6778f5c54d...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6778f5c54d5906dfde09a8d37fa7537d_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240723-nyxmdatgqh

  • MD5

    6778f5c54d5906dfde09a8d37fa7537d

  • SHA1

    77c32c465392264a8b5ac49b1d4665d47e26d87b

  • SHA256

    b21afd7e789cabc476f4b371b53ea9b58f60fc4a6b9cdd900a3e66c2d22cafae

  • SHA512

    9e4f03690a494119060f13f476e76dade5f4cbd052d9bc873be837e7aa74067c10568f7e3ece8a0baaf400f5a798ed74f9aae5a62be547abf8754a2c8a32d4ed

  • SSDEEP

    49152:SnAQXMShacBVe/1INRx+TSqTdX1HkQo6SAARdhnv/Eau3RZAH:+DXhfBQ1aRxcSUDk36SAEdhvW3RiH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      6778f5c54d5906dfde09a8d37fa7537d_JaffaCakes118

    • Size

      5.0MB

    • MD5

      6778f5c54d5906dfde09a8d37fa7537d

    • SHA1

      77c32c465392264a8b5ac49b1d4665d47e26d87b

    • SHA256

      b21afd7e789cabc476f4b371b53ea9b58f60fc4a6b9cdd900a3e66c2d22cafae

    • SHA512

      9e4f03690a494119060f13f476e76dade5f4cbd052d9bc873be837e7aa74067c10568f7e3ece8a0baaf400f5a798ed74f9aae5a62be547abf8754a2c8a32d4ed

    • SSDEEP

      49152:SnAQXMShacBVe/1INRx+TSqTdX1HkQo6SAARdhnv/Eau3RZAH:+DXhfBQ1aRxcSUDk36SAEdhvW3RiH

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3086) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks