Resubmissions

20-01-2022 14:47

220120-r6dq1sada6 10

20-01-2022 14:35

220120-ryey4sachn 10

General

  • Target

    mssecsvr.exe

  • Size

    2.2MB

  • Sample

    220120-r6dq1sada6

  • MD5

    142db3228dd9177f5fdaec26d0f0e19a

  • SHA1

    f4f080d897a4fe16aa557a3499a7d495db62148b

  • SHA256

    458d19c4e0d41353ade3b5eb94815436ac911ad13c2fa525f753d5ef182f417f

  • SHA512

    07a24755cc8e53669065d3dcfaee9ff6670670242b4e7f5ddd82f75501923372a394063f3b6a9fcd27cf67eb84a152e3b7b7c7d0327d22e2591fb47dec9053cf

Malware Config

Targets

    • Target

      mssecsvr.exe

    • Size

      2.2MB

    • MD5

      142db3228dd9177f5fdaec26d0f0e19a

    • SHA1

      f4f080d897a4fe16aa557a3499a7d495db62148b

    • SHA256

      458d19c4e0d41353ade3b5eb94815436ac911ad13c2fa525f753d5ef182f417f

    • SHA512

      07a24755cc8e53669065d3dcfaee9ff6670670242b4e7f5ddd82f75501923372a394063f3b6a9fcd27cf67eb84a152e3b7b7c7d0327d22e2591fb47dec9053cf

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks