Overview

overview

10

Static

static

3

c889461c03...18.dll

windows7-x64

10

c889461c03...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c889461c03b7669a958e02acca1c543a_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240829-k4wqgstclg

  • MD5

    c889461c03b7669a958e02acca1c543a

  • SHA1

    6b9c7e3f07d783baa2fb10dc317b1daa487f2dc1

  • SHA256

    a44ec03daf37b58d399d7a4dba8b567ecaca38a9365099309522d012323d64b0

  • SHA512

    d5601b8cffd5aab91c52eba2332a7802cbc59c1b19162d79bcd3450dbac701a391ab2df7290ed32343ccd5b50b0d49b8e664be76a28cac06f42fb6ecba4c1b2d

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      c889461c03b7669a958e02acca1c543a_JaffaCakes118

    • Size

      5.0MB

    • MD5

      c889461c03b7669a958e02acca1c543a

    • SHA1

      6b9c7e3f07d783baa2fb10dc317b1daa487f2dc1

    • SHA256

      a44ec03daf37b58d399d7a4dba8b567ecaca38a9365099309522d012323d64b0

    • SHA512

      d5601b8cffd5aab91c52eba2332a7802cbc59c1b19162d79bcd3450dbac701a391ab2df7290ed32343ccd5b50b0d49b8e664be76a28cac06f42fb6ecba4c1b2d

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3043) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks