Resubmissions

06-09-2024 04:10

240906-ermddsvhjm 10

06-09-2024 04:04

240906-em4rwawbkg 10

General

  • Target

    ce9bf2f35c44c682cbc9c2a346815718_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240906-ermddsvhjm

  • MD5

    ce9bf2f35c44c682cbc9c2a346815718

  • SHA1

    0d979d19264f092d5bcdc322bd0a057bacdaf39d

  • SHA256

    85f5061d48750a64b929924d147eed7b0a643b38854fac0f072e2061433e0585

  • SHA512

    a507634bec7507e251735a924c57317daeafb5b03704d05fcf89959a63ced8df986d797ea7a2b6ab1880bde57b392f57ef3e7497db1a4fc6c2c0eb1beeaff1b7

  • SSDEEP

    98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R0:XDqPe1Cxcxk3ZAEUadzR0

Malware Config

Targets

    • Target

      ce9bf2f35c44c682cbc9c2a346815718_JaffaCakes118

    • Size

      3.6MB

    • MD5

      ce9bf2f35c44c682cbc9c2a346815718

    • SHA1

      0d979d19264f092d5bcdc322bd0a057bacdaf39d

    • SHA256

      85f5061d48750a64b929924d147eed7b0a643b38854fac0f072e2061433e0585

    • SHA512

      a507634bec7507e251735a924c57317daeafb5b03704d05fcf89959a63ced8df986d797ea7a2b6ab1880bde57b392f57ef3e7497db1a4fc6c2c0eb1beeaff1b7

    • SSDEEP

      98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R0:XDqPe1Cxcxk3ZAEUadzR0

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (974) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks