Overview

overview

10

Static

static

3

c3771d736c...18.dll

windows7-x64

10

c3771d736c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3771d736c9c8811ee5e44cbd533bc60_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240826-vshplavhrc

  • MD5

    c3771d736c9c8811ee5e44cbd533bc60

  • SHA1

    3001f0d67b254b9fac910b8dde2ee6bc29977b3a

  • SHA256

    b10fedc2ddaeed43c2ca040123d060ec5af0fefc1a4ddc24f0b122b6734b8d86

  • SHA512

    c7cb983880d3c730ed66ec7d437e55dfd2e16ba0cda82e9b09c25a845930e6240e4b774ddbaf7d0c1854cf20c085b1bfa668e4d39921e7563ef908b418416747

  • SSDEEP

    98304:+8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2owc:+8qPe1Cxcxk3ZAEUadzR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      c3771d736c9c8811ee5e44cbd533bc60_JaffaCakes118

    • Size

      5.0MB

    • MD5

      c3771d736c9c8811ee5e44cbd533bc60

    • SHA1

      3001f0d67b254b9fac910b8dde2ee6bc29977b3a

    • SHA256

      b10fedc2ddaeed43c2ca040123d060ec5af0fefc1a4ddc24f0b122b6734b8d86

    • SHA512

      c7cb983880d3c730ed66ec7d437e55dfd2e16ba0cda82e9b09c25a845930e6240e4b774ddbaf7d0c1854cf20c085b1bfa668e4d39921e7563ef908b418416747

    • SSDEEP

      98304:+8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2owc:+8qPe1Cxcxk3ZAEUadzR8yc4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3328) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks