Overview

overview

10

Static

static

3

eff7ed3a2f...18.dll

windows7-x64

10

eff7ed3a2f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eff7ed3a2f9c4ef0267ac1f7dfcc8a85_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240921-rjjczswdlb

  • MD5

    eff7ed3a2f9c4ef0267ac1f7dfcc8a85

  • SHA1

    da1fba0d6f588f7592285222df645e7fd1a22a4c

  • SHA256

    74c2c542b12d3b2dce639da04c9e05c70a00d8af3979c4108dbeedc302500688

  • SHA512

    79cfa58761c9de860b2a5856f08b9ee9e7b5d747d00242fd9626266d7fcd52c630684368fc108f539142c4f42d616a90d75728c6290ca41657c09ba29edd13e5

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:+DqPe1Cxcxk3ZAEUadzR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      eff7ed3a2f9c4ef0267ac1f7dfcc8a85_JaffaCakes118

    • Size

      5.0MB

    • MD5

      eff7ed3a2f9c4ef0267ac1f7dfcc8a85

    • SHA1

      da1fba0d6f588f7592285222df645e7fd1a22a4c

    • SHA256

      74c2c542b12d3b2dce639da04c9e05c70a00d8af3979c4108dbeedc302500688

    • SHA512

      79cfa58761c9de860b2a5856f08b9ee9e7b5d747d00242fd9626266d7fcd52c630684368fc108f539142c4f42d616a90d75728c6290ca41657c09ba29edd13e5

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:+DqPe1Cxcxk3ZAEUadzR8yc4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3222) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks