Overview

overview

10

Static

static

3

c6c4356675...18.dll

windows7-x64

10

c6c4356675...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6c4356675da0276bd14910a6232ff73_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240828-nprprsycln

  • MD5

    c6c4356675da0276bd14910a6232ff73

  • SHA1

    8e1c2bfcd5f2f53c8a1f3e1031bf0033a66ba7f6

  • SHA256

    0935255e0bd813c450e7e034cbdc4e5f4d8f9bc0d4c2c97fe1e9c62536e00e1f

  • SHA512

    98fe76174482053561ec164b4f950baa90eedf513d318032f98a9382626592b99221dd48c9f8f6c2384035835d8bba4d064c1f73766ea115195fb8b3668f0097

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593i2H:+DqPe1Cxcxk3ZAEUadzhH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      c6c4356675da0276bd14910a6232ff73_JaffaCakes118

    • Size

      5.0MB

    • MD5

      c6c4356675da0276bd14910a6232ff73

    • SHA1

      8e1c2bfcd5f2f53c8a1f3e1031bf0033a66ba7f6

    • SHA256

      0935255e0bd813c450e7e034cbdc4e5f4d8f9bc0d4c2c97fe1e9c62536e00e1f

    • SHA512

      98fe76174482053561ec164b4f950baa90eedf513d318032f98a9382626592b99221dd48c9f8f6c2384035835d8bba4d064c1f73766ea115195fb8b3668f0097

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593i2H:+DqPe1Cxcxk3ZAEUadzhH

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3202) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks