General

  • Target

    edff1a8b473cdc513a9fb76d75e9bc8e_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240920-t3nsxswdnf

  • MD5

    edff1a8b473cdc513a9fb76d75e9bc8e

  • SHA1

    07e62469ba40b315a2476ba17bfe8e14ee08bcc6

  • SHA256

    aac0eec1ac9e7d36336cae82fb402f8ef9b0d557699db1ed118512222ba56d79

  • SHA512

    7cf14beb23f64ce21d399d64d6c39263903719a3afe9b6096b1aab2b087317fdac7923f155ca78295457d7a3387809191e8e6a041b78fd3519ad02e1eb86c889

  • SSDEEP

    49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9PAMEcaEa:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5

Malware Config

Targets

    • Target

      edff1a8b473cdc513a9fb76d75e9bc8e_JaffaCakes118

    • Size

      5.0MB

    • MD5

      edff1a8b473cdc513a9fb76d75e9bc8e

    • SHA1

      07e62469ba40b315a2476ba17bfe8e14ee08bcc6

    • SHA256

      aac0eec1ac9e7d36336cae82fb402f8ef9b0d557699db1ed118512222ba56d79

    • SHA512

      7cf14beb23f64ce21d399d64d6c39263903719a3afe9b6096b1aab2b087317fdac7923f155ca78295457d7a3387809191e8e6a041b78fd3519ad02e1eb86c889

    • SSDEEP

      49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9PAMEcaEa:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3202) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks