Overview

overview

10

Static

static

3

d425e84ff0...18.dll

windows7-x64

10

d425e84ff0...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d425e84ff06db0fdb37101daf98d2ab6_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240908-mg91pstbpb

  • MD5

    d425e84ff06db0fdb37101daf98d2ab6

  • SHA1

    b09dfea9c4c14a9d0e8dff30cbce982e63bc8208

  • SHA256

    3c7e73a52bab42b0a061f94e9a2ae9ae8a06849fd95cd7e21164d1864847018b

  • SHA512

    d4aa5ddf57e655ac8e7fa57edebdbe51e1366a14f3e6b582baa5ef753f9f847b76fb3a035adcaf9b9bb9dfb1ffa1185a9547570f26b87034056ac0591800b2c1

  • SSDEEP

    98304:+DqPoBE1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:+DqPn1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      d425e84ff06db0fdb37101daf98d2ab6_JaffaCakes118

    • Size

      5.0MB

    • MD5

      d425e84ff06db0fdb37101daf98d2ab6

    • SHA1

      b09dfea9c4c14a9d0e8dff30cbce982e63bc8208

    • SHA256

      3c7e73a52bab42b0a061f94e9a2ae9ae8a06849fd95cd7e21164d1864847018b

    • SHA512

      d4aa5ddf57e655ac8e7fa57edebdbe51e1366a14f3e6b582baa5ef753f9f847b76fb3a035adcaf9b9bb9dfb1ffa1185a9547570f26b87034056ac0591800b2c1

    • SSDEEP

      98304:+DqPoBE1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:+DqPn1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3064) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks