Overview

overview

10

Static

static

3

d75c541d04...18.dll

windows7-x64

10

d75c541d04...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d75c541d0472028e2959890f9f41e270_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240910-a6ejwayejm

  • MD5

    d75c541d0472028e2959890f9f41e270

  • SHA1

    354e644965b49fc9fc9c89336f77818420535558

  • SHA256

    9a99cfd3b792f08aca555bd4486d6c402a7091640ff851b9000f4e07955e513d

  • SHA512

    dec0c5f145fe52a5de1e45781c2d58a16c63d8cd12a084e62f35bbc52cb4e57e9e7c0eb047bcdf600cd401cd814c47d0ebcf1a7aed4d001bbab8a5e8c058c856

  • SSDEEP

    12288:yvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82xi:SbLgddQhfdmMSirYbcMt

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      d75c541d0472028e2959890f9f41e270_JaffaCakes118

    • Size

      5.0MB

    • MD5

      d75c541d0472028e2959890f9f41e270

    • SHA1

      354e644965b49fc9fc9c89336f77818420535558

    • SHA256

      9a99cfd3b792f08aca555bd4486d6c402a7091640ff851b9000f4e07955e513d

    • SHA512

      dec0c5f145fe52a5de1e45781c2d58a16c63d8cd12a084e62f35bbc52cb4e57e9e7c0eb047bcdf600cd401cd814c47d0ebcf1a7aed4d001bbab8a5e8c058c856

    • SSDEEP

      12288:yvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82xi:SbLgddQhfdmMSirYbcMt

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3208) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks