Overview

overview

10

Static

static

3

fd7c451d53...18.dll

windows7-x64

10

fd7c451d53...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd7c451d538bde5e7f4c44f9adcd9f20_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240929-a9rnlswenh

  • MD5

    fd7c451d538bde5e7f4c44f9adcd9f20

  • SHA1

    52bca09f35d9c23bd96d5bbad1fd5e06a245190f

  • SHA256

    3950179ee45f03af2d6c1130d0db04ad3441c2befc7fb5a28460d5fc45f1beb8

  • SHA512

    fd2926b03f3680d2f9f05ed209c617f7e00069ee451e4bc2c1233dcf6d62f4f6bc414d3cd390fa9d66e814e1ab4364fa20ae0a58a4d496df7c07b250b43bcb0f

  • SSDEEP

    24576:zbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIq:znAQqMSPbcBVQej/

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      fd7c451d538bde5e7f4c44f9adcd9f20_JaffaCakes118

    • Size

      5.0MB

    • MD5

      fd7c451d538bde5e7f4c44f9adcd9f20

    • SHA1

      52bca09f35d9c23bd96d5bbad1fd5e06a245190f

    • SHA256

      3950179ee45f03af2d6c1130d0db04ad3441c2befc7fb5a28460d5fc45f1beb8

    • SHA512

      fd2926b03f3680d2f9f05ed209c617f7e00069ee451e4bc2c1233dcf6d62f4f6bc414d3cd390fa9d66e814e1ab4364fa20ae0a58a4d496df7c07b250b43bcb0f

    • SSDEEP

      24576:zbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIq:znAQqMSPbcBVQej/

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3258) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks