Overview

overview

10

Static

static

3

c550bb3bf7...18.dll

windows7-x64

10

c550bb3bf7...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c550bb3bf70dd6c92584eb9efd28bd20_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240827-tdyltszgpq

  • MD5

    c550bb3bf70dd6c92584eb9efd28bd20

  • SHA1

    e24cea987579cf2779c75387329a8bd5a312f84e

  • SHA256

    d243449d988ac7aa72ba11b19c453180c8a866d58b19a2316580fa56fa6de5db

  • SHA512

    d8d811c2b00a94ab337a960724c69016113c4380a82d22ae35c97588180d8ab4f55c1d15a41601f35ffbd65967741f86b33a0c480ad3e89dcb83bb8f47600da1

  • SSDEEP

    49152:SnAQGpQ6v+cS/8qOxOWbVrlC7J6UNBq4JwAXLy30hQn/+qE3EFOmH:+DGpZ885j8JXBqAwAXWkhQWh3EFOM

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      c550bb3bf70dd6c92584eb9efd28bd20_JaffaCakes118

    • Size

      5.0MB

    • MD5

      c550bb3bf70dd6c92584eb9efd28bd20

    • SHA1

      e24cea987579cf2779c75387329a8bd5a312f84e

    • SHA256

      d243449d988ac7aa72ba11b19c453180c8a866d58b19a2316580fa56fa6de5db

    • SHA512

      d8d811c2b00a94ab337a960724c69016113c4380a82d22ae35c97588180d8ab4f55c1d15a41601f35ffbd65967741f86b33a0c480ad3e89dcb83bb8f47600da1

    • SSDEEP

      49152:SnAQGpQ6v+cS/8qOxOWbVrlC7J6UNBq4JwAXLy30hQn/+qE3EFOmH:+DGpZ885j8JXBqAwAXWkhQWh3EFOM

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3214) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks