Overview

overview

10

Static

static

3

f4467cf9b7...18.dll

windows7-x64

10

f4467cf9b7...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4467cf9b7f5c536f0766ac2851b53b7_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240924-xb4xlssbnd

  • MD5

    f4467cf9b7f5c536f0766ac2851b53b7

  • SHA1

    5c64d92015518d307b5e5856bc4e4ced71a08c2b

  • SHA256

    89f0d1195df4ff42f0d0ff7726474b2ad6a135cbc78f255ff89b19903459bc67

  • SHA512

    3a7bd00462040ed25e29ceef192dfcba74b81811465f5921b0a09deb4b3845e1686ed274ae12568f60ebee6fd9c6dbbc4cfd56a727f944101b1a86a38cc4c4a4

  • SSDEEP

    24576:RbLgurihdmMSirYbcMNgef0QeQjG/D8kIqRYo:RnnMSPbcBVQej/1

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      f4467cf9b7f5c536f0766ac2851b53b7_JaffaCakes118

    • Size

      5.0MB

    • MD5

      f4467cf9b7f5c536f0766ac2851b53b7

    • SHA1

      5c64d92015518d307b5e5856bc4e4ced71a08c2b

    • SHA256

      89f0d1195df4ff42f0d0ff7726474b2ad6a135cbc78f255ff89b19903459bc67

    • SHA512

      3a7bd00462040ed25e29ceef192dfcba74b81811465f5921b0a09deb4b3845e1686ed274ae12568f60ebee6fd9c6dbbc4cfd56a727f944101b1a86a38cc4c4a4

    • SSDEEP

      24576:RbLgurihdmMSirYbcMNgef0QeQjG/D8kIqRYo:RnnMSPbcBVQej/1

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3191) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks