wannacry | 379cf4fce883e5853294990f94c082eb971db7b0e3a817f7abd4facffc4fe23f | Triage

Submit
Reports

Overview

overview

Static

static

3

c2b3f51728...18.dll

windows7-x64

c2b3f51728...18.dll

windows10-2004-x64

Sharing

General

Target

c2b3f51728001fbaaa5a73fcaf3e1a68_JaffaCakes118
Size

5.0MB
Sample

240826-k77l6awdpf
MD5

c2b3f51728001fbaaa5a73fcaf3e1a68
SHA1

38b9d3880194558f17b9fa03b22d43b66691b82a
SHA256

379cf4fce883e5853294990f94c082eb971db7b0e3a817f7abd4facffc4fe23f
SHA512

7b1e75e2b86fe6aabd5713cb717ee85b1b0800a297a873ac70fcc179b683809bf5673ca6985f7771c234cb49a4f7c0d85031c834d5f9df9ccf27f460117c3638
SSDEEP

98304:d8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVb:d8qPe1Cxcxk3ZAEUadzR8ycb

Score

10^/10

wannacry discovery ransomware worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c2b3f51728001fbaaa5a73fcaf3e1a68_JaffaCakes118.dll

Resource

win7-20240704-en

wannacry discovery ransomware worm

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

c2b3f51728001fbaaa5a73fcaf3e1a68_JaffaCakes118.dll

Resource

win10v2004-20240802-en

wannacry discovery ransomware worm

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  c2b3f51728001fbaaa5a73fcaf3e1a68_JaffaCakes118
- Size
  
  5.0MB
- MD5
  
  c2b3f51728001fbaaa5a73fcaf3e1a68
- SHA1
  
  38b9d3880194558f17b9fa03b22d43b66691b82a
- SHA256
  
  379cf4fce883e5853294990f94c082eb971db7b0e3a817f7abd4facffc4fe23f
- SHA512
  
  7b1e75e2b86fe6aabd5713cb717ee85b1b0800a297a873ac70fcc179b683809bf5673ca6985f7771c234cb49a4f7c0d85031c834d5f9df9ccf27f460117c3638
- SSDEEP
  
  98304:d8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVb:d8qPe1Cxcxk3ZAEUadzR8ycb
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3233) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm

© 2018-2025

Terms | Privacy