Overview

overview

10

Static

static

3

ebcb8eeb3a...18.dll

windows7-x64

10

ebcb8eeb3a...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebcb8eeb3a0ab32633aea9ce7abdd07e_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240919-vj7mcszgjj

  • MD5

    ebcb8eeb3a0ab32633aea9ce7abdd07e

  • SHA1

    97a1836b9e66961599a921b1f1596e979c81d5eb

  • SHA256

    3fbdc29264fb824e9590ff6090b654143a248c38e65a2eeaca3a8cb3ff69d368

  • SHA512

    2c5e99740c9c628752bc8be40335f064ae5ef8bc570fba78c56ee85f3dfdf4c42b2757c9c7bfeb1e620f02ecff5131c5d36f9c2c670f257899eda0de36a3cbae

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0PSrHV7YoZnA/70CUt:SnAQqMSPbcBVarHV7YoG/QC

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      ebcb8eeb3a0ab32633aea9ce7abdd07e_JaffaCakes118

    • Size

      5.0MB

    • MD5

      ebcb8eeb3a0ab32633aea9ce7abdd07e

    • SHA1

      97a1836b9e66961599a921b1f1596e979c81d5eb

    • SHA256

      3fbdc29264fb824e9590ff6090b654143a248c38e65a2eeaca3a8cb3ff69d368

    • SHA512

      2c5e99740c9c628752bc8be40335f064ae5ef8bc570fba78c56ee85f3dfdf4c42b2757c9c7bfeb1e620f02ecff5131c5d36f9c2c670f257899eda0de36a3cbae

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0PSrHV7YoZnA/70CUt:SnAQqMSPbcBVarHV7YoG/QC

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3263) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks