General

  • Target

    mssecsvc.exe

  • Size

    3.6MB

  • Sample

    201018-5jyhtegkt2

  • MD5

    1766d9d4769580c0fab9e6ad5bf73436

  • SHA1

    02eca9f1966819d63d82d62a94c8af3e76041411

  • SHA256

    fa97baaa08d04807e478688a133076a109a7578c7b4d9be15e96b4de8522807d

  • SHA512

    41e36b6a7e0ba4783cd90039cff5e87743cca2e8deee63b62cc0dcb8bab459f1d7919f59275cc266ef1519942ad2386c16791bd9706ee06eb4658f3f86018f50

Malware Config

Targets

    • Target

      mssecsvc.exe

    • Size

      3.6MB

    • MD5

      1766d9d4769580c0fab9e6ad5bf73436

    • SHA1

      02eca9f1966819d63d82d62a94c8af3e76041411

    • SHA256

      fa97baaa08d04807e478688a133076a109a7578c7b4d9be15e96b4de8522807d

    • SHA512

      41e36b6a7e0ba4783cd90039cff5e87743cca2e8deee63b62cc0dcb8bab459f1d7919f59275cc266ef1519942ad2386c16791bd9706ee06eb4658f3f86018f50

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks