wannacry | be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d | Triage

Submit
Reports

Overview

overview

Static

static

3

9f0f848cc5...18.dll

windows7-x64

9f0f848cc5...18.dll

windows10-2004-x64

Sharing

General

Target

9f0f848cc5f6daecccddf8ca0bed1f10_JaffaCakes118
Size

5.0MB
Sample

240816-tmlzdsxepj
MD5

9f0f848cc5f6daecccddf8ca0bed1f10
SHA1

df62c948fd129b268a1ce57ee25a0c4d0a7b6b87
SHA256

be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d
SHA512

5d1c550be6bbf766045c832ea742caa227825cd523ca89b744ec37de33d7d17277415ac205356d513502293c26447e8941da54e5bdb724239fce1ab53f82e0c3
SSDEEP

49152:RnHqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:1HqPoBhz1aRxcSUDk36SA

Score

10^/10

wannacry discovery ransomware worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

9f0f848cc5f6daecccddf8ca0bed1f10_JaffaCakes118.dll

Resource

win7-20240704-en

wannacry discovery ransomware worm

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

9f0f848cc5f6daecccddf8ca0bed1f10_JaffaCakes118.dll

Resource

win10v2004-20240802-en

wannacry discovery ransomware worm

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  9f0f848cc5f6daecccddf8ca0bed1f10_JaffaCakes118
- Size
  
  5.0MB
- MD5
  
  9f0f848cc5f6daecccddf8ca0bed1f10
- SHA1
  
  df62c948fd129b268a1ce57ee25a0c4d0a7b6b87
- SHA256
  
  be3893f2620394d693919b325f691a08d0b1ab2a6598c2a22619284feb56015d
- SHA512
  
  5d1c550be6bbf766045c832ea742caa227825cd523ca89b744ec37de33d7d17277415ac205356d513502293c26447e8941da54e5bdb724239fce1ab53f82e0c3
- SSDEEP
  
  49152:RnHqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:1HqPoBhz1aRxcSUDk36SA
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3135) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm

© 2018-2025

Terms | Privacy