General

  • Target

    f50e7b86f309889b0b56acd0f0c21254_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240925-dtzwtssbkk

  • MD5

    f50e7b86f309889b0b56acd0f0c21254

  • SHA1

    b61458218d5f4ea10f9cd5a05a6939c834268783

  • SHA256

    0f22288db97075f2729ab06f11988e732c59ee66e18278b13316be479046abed

  • SHA512

    821e31b74a22963f9e45526d145cfe181b84f77acbc4c6e8f0374f95f6ce6126bd3ddd1076aa8b1e5b7bdd484d5a3e1f841ac1e39d00ef317cf9563a6628b4ee

  • SSDEEP

    12288:yvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7Tw+K+DHeQYSUjEXFh:SbLgddQhfdmMSirYbcMNgef0QeQjG

Malware Config

Targets

    • Target

      f50e7b86f309889b0b56acd0f0c21254_JaffaCakes118

    • Size

      5.0MB

    • MD5

      f50e7b86f309889b0b56acd0f0c21254

    • SHA1

      b61458218d5f4ea10f9cd5a05a6939c834268783

    • SHA256

      0f22288db97075f2729ab06f11988e732c59ee66e18278b13316be479046abed

    • SHA512

      821e31b74a22963f9e45526d145cfe181b84f77acbc4c6e8f0374f95f6ce6126bd3ddd1076aa8b1e5b7bdd484d5a3e1f841ac1e39d00ef317cf9563a6628b4ee

    • SSDEEP

      12288:yvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7Tw+K+DHeQYSUjEXFh:SbLgddQhfdmMSirYbcMNgef0QeQjG

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3314) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.