wannacry | 5f0eb9ab500665e6f7251aea5ec2fbeff7f74d9a3bdef34245e63a53599e5cc8 | Triage

Submit
Reports

Overview

overview

Static

static

3

d60eb1b1cc...18.exe

windows7-x64

d60eb1b1cc...18.exe

windows10-2004-x64

Sharing

General

Target

d60eb1b1cce833e5ef6dda81ca74a9c6_JaffaCakes118
Size

3.6MB
Sample

240909-lm3cdatgnc
MD5

d60eb1b1cce833e5ef6dda81ca74a9c6
SHA1

465f21405a5a4086160c8a945a24adb7d8175c8f
SHA256

5f0eb9ab500665e6f7251aea5ec2fbeff7f74d9a3bdef34245e63a53599e5cc8
SHA512

7c6a61846be7c5bf8ae24c4e869af746596b5e9414032a5e7ad1a0d4c04ca892bb4d100ab4eb9bbfe763515e5b81c700aa9d6b4f4bacbd988bb956ebdd9353aa
SSDEEP

98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8iI:yDqPe1Cxcxk3ZAEUadzR8iI

Score

10^/10

wannacry discovery ransomware worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d60eb1b1cce833e5ef6dda81ca74a9c6_JaffaCakes118.exe

Resource

win7-20240903-en

wannacry discovery ransomware worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

d60eb1b1cce833e5ef6dda81ca74a9c6_JaffaCakes118.exe

Resource

win10v2004-20240802-en

wannacry discovery ransomware worm

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  d60eb1b1cce833e5ef6dda81ca74a9c6_JaffaCakes118
- Size
  
  3.6MB
- MD5
  
  d60eb1b1cce833e5ef6dda81ca74a9c6
- SHA1
  
  465f21405a5a4086160c8a945a24adb7d8175c8f
- SHA256
  
  5f0eb9ab500665e6f7251aea5ec2fbeff7f74d9a3bdef34245e63a53599e5cc8
- SHA512
  
  7c6a61846be7c5bf8ae24c4e869af746596b5e9414032a5e7ad1a0d4c04ca892bb4d100ab4eb9bbfe763515e5b81c700aa9d6b4f4bacbd988bb956ebdd9353aa
- SSDEEP
  
  98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8iI:yDqPe1Cxcxk3ZAEUadzR8iI
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3263) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm

© 2018-2025

Terms | Privacy