Overview

overview

10

Static

static

3

f7bdadd365...18.dll

windows7-x64

10

f7bdadd365...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7bdadd3654d29bc9a6017f701cbfa2c_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240926-gxzl1s1hmj

  • MD5

    f7bdadd3654d29bc9a6017f701cbfa2c

  • SHA1

    9c55fb033da1b0ca19846b08634caa71a57014cb

  • SHA256

    fe48fa80b301e29bc3d433da19f8df105561711ebf5a9ac55e3eb18565e1ab83

  • SHA512

    ab37bcf0f7e50f75efb8b024a1000fa4a8e5985bd0296d146577a2860188ff1f2c9d56008dca5d84b40cd16824bb6afb1a43fd4fc609dae047e7df9a639fb171

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P5Y:+DqPe1Cxcxk3ZAEUady

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      f7bdadd3654d29bc9a6017f701cbfa2c_JaffaCakes118

    • Size

      5.0MB

    • MD5

      f7bdadd3654d29bc9a6017f701cbfa2c

    • SHA1

      9c55fb033da1b0ca19846b08634caa71a57014cb

    • SHA256

      fe48fa80b301e29bc3d433da19f8df105561711ebf5a9ac55e3eb18565e1ab83

    • SHA512

      ab37bcf0f7e50f75efb8b024a1000fa4a8e5985bd0296d146577a2860188ff1f2c9d56008dca5d84b40cd16824bb6afb1a43fd4fc609dae047e7df9a639fb171

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P5Y:+DqPe1Cxcxk3ZAEUady

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3293) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks