Overview

overview

10

Static

static

3

c56b1bae6d...18.exe

windows7-x64

10

c56b1bae6d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c56b1bae6db24a789be1fe6eceed0ef3_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240827-v9x6lsvajm

  • MD5

    c56b1bae6db24a789be1fe6eceed0ef3

  • SHA1

    e91c3daa76d20ceca31891f408c3eee07c0f96ca

  • SHA256

    132dd69d806b0b632bc8fd0eaa593df9422427ae96aab81760985dbbd1312844

  • SHA512

    3a2a6de5f87b1385cbc2219c627ec276a33061a29a6ec499b874fe42c6b77794526d15f1385af14b7f086579347aed63891b4e9c36cbdc57922aa5387f6f6847

  • SSDEEP

    49152:2nAQqMSPbcBVQeuRdhnvxJM0H9PAMEcaEau3R8:yDqPoBhidhvxWa9P593R8

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      c56b1bae6db24a789be1fe6eceed0ef3_JaffaCakes118

    • Size

      3.6MB

    • MD5

      c56b1bae6db24a789be1fe6eceed0ef3

    • SHA1

      e91c3daa76d20ceca31891f408c3eee07c0f96ca

    • SHA256

      132dd69d806b0b632bc8fd0eaa593df9422427ae96aab81760985dbbd1312844

    • SHA512

      3a2a6de5f87b1385cbc2219c627ec276a33061a29a6ec499b874fe42c6b77794526d15f1385af14b7f086579347aed63891b4e9c36cbdc57922aa5387f6f6847

    • SSDEEP

      49152:2nAQqMSPbcBVQeuRdhnvxJM0H9PAMEcaEau3R8:yDqPoBhidhvxWa9P593R8

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3328) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks