Overview

overview

10

Static

static

3

be37645270...18.dll

windows7-x64

10

be37645270...18.dll

windows10-2004-x64

10

Resubmissions

24-08-2024 08:45

240824-kn5y8asbkh 10

24-08-2024 08:23

240824-kajh3atanl 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be376452707de19a4abf88da57dbd3a2_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240824-kajh3atanl

  • MD5

    be376452707de19a4abf88da57dbd3a2

  • SHA1

    4faf9ea5ffea32f7b09f666bc2bec21f4062cbd5

  • SHA256

    464d83ae52e2c6428504335d44bf79f866757a1d47281a1f1d4a51acc32e25d4

  • SHA512

    a4203e37fbdda7da6e4893b7d6b2fd66526bdd70be28ba69b1df291cbd05129c5059707f78d968acf418f6281ae578cf6a58d2fc2d4142c71ff35d66133507c1

  • SSDEEP

    49152:SnAQqMSPbcBV3GGafYzflm+fZTFZIGayscOqdImwW6LC:+DqPoBQ+iUP2dWOC

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      be376452707de19a4abf88da57dbd3a2_JaffaCakes118

    • Size

      5.0MB

    • MD5

      be376452707de19a4abf88da57dbd3a2

    • SHA1

      4faf9ea5ffea32f7b09f666bc2bec21f4062cbd5

    • SHA256

      464d83ae52e2c6428504335d44bf79f866757a1d47281a1f1d4a51acc32e25d4

    • SHA512

      a4203e37fbdda7da6e4893b7d6b2fd66526bdd70be28ba69b1df291cbd05129c5059707f78d968acf418f6281ae578cf6a58d2fc2d4142c71ff35d66133507c1

    • SSDEEP

      49152:SnAQqMSPbcBV3GGafYzflm+fZTFZIGayscOqdImwW6LC:+DqPoBQ+iUP2dWOC

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3195) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks