Overview

overview

10

Static

static

3

bea2c7b2a0...18.dll

windows7-x64

10

bea2c7b2a0...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bea2c7b2a054321b99b855abaa7ede8f_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240824-p647vssgmq

  • MD5

    bea2c7b2a054321b99b855abaa7ede8f

  • SHA1

    55bb7148586969fdd2be6b94ab3846937d88623e

  • SHA256

    a735ae0e3018c7098d998c17ad5f01d0ddb72edfa754a9e9ddd1a70c2f095c97

  • SHA512

    2f0d3c70edef83e4bf0597e107000be68c554be2010e436bd4c0916cd375060b01508434e30844261098b28c517a97636adb71a70d2eaffb052f9011c2dce5c8

  • SSDEEP

    24576:RbLguriIfEcQdIvrYbcMNgef0QeQjG/D8kIqRYoAda6626WgkQg6eX6SASk+Rdhv:RnpEjbcBVQej/1Il6kQo6SAARdhnv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      bea2c7b2a054321b99b855abaa7ede8f_JaffaCakes118

    • Size

      5.0MB

    • MD5

      bea2c7b2a054321b99b855abaa7ede8f

    • SHA1

      55bb7148586969fdd2be6b94ab3846937d88623e

    • SHA256

      a735ae0e3018c7098d998c17ad5f01d0ddb72edfa754a9e9ddd1a70c2f095c97

    • SHA512

      2f0d3c70edef83e4bf0597e107000be68c554be2010e436bd4c0916cd375060b01508434e30844261098b28c517a97636adb71a70d2eaffb052f9011c2dce5c8

    • SSDEEP

      24576:RbLguriIfEcQdIvrYbcMNgef0QeQjG/D8kIqRYoAda6626WgkQg6eX6SASk+Rdhv:RnpEjbcBVQej/1Il6kQo6SAARdhnv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2087) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks