General

  • Target

    d92b2286415e3f93547a22c3c0eb5760_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240910-2nrj9syglq

  • MD5

    d92b2286415e3f93547a22c3c0eb5760

  • SHA1

    2bb33b0cc342df2e6ebdef009d5a173370971ba0

  • SHA256

    0dbe3f5bff86d59ee4f30c425a8ebc7005c76d98ea77676fd9cd6f42d6a4dc30

  • SHA512

    16c1e2d921d4146e547c831168e4c87b26d21626ec905a26e37becddc9faa820d38bf3df9d47a8dbacb57fa858df17709126b46d524a81fba17c2606ba43de20

  • SSDEEP

    49152:znjQqMSPbcBVQej/+INRx+TSqTdX1HkQo6SAARdhnvxJM0H9PAMEc:T8qPoBhz+aRxcSUDk36SAEdhvxWa9P5

Malware Config

Targets

    • Target

      d92b2286415e3f93547a22c3c0eb5760_JaffaCakes118

    • Size

      5.0MB

    • MD5

      d92b2286415e3f93547a22c3c0eb5760

    • SHA1

      2bb33b0cc342df2e6ebdef009d5a173370971ba0

    • SHA256

      0dbe3f5bff86d59ee4f30c425a8ebc7005c76d98ea77676fd9cd6f42d6a4dc30

    • SHA512

      16c1e2d921d4146e547c831168e4c87b26d21626ec905a26e37becddc9faa820d38bf3df9d47a8dbacb57fa858df17709126b46d524a81fba17c2606ba43de20

    • SSDEEP

      49152:znjQqMSPbcBVQej/+INRx+TSqTdX1HkQo6SAARdhnvxJM0H9PAMEc:T8qPoBhz+aRxcSUDk36SAEdhvxWa9P5

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3254) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks