Overview

overview

10

Static

static

7094602723...37.dll

windows7_x64

10

7094602723...37.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    709460272380d30e81c5d1797b2ee1ab7fa62537.malware

  • Size

    5.0MB

  • Sample

    220222-nqfznagch8

  • MD5

    a35833d30e65f9a68a74f86f0b432b0e

  • SHA1

    709460272380d30e81c5d1797b2ee1ab7fa62537

  • SHA256

    03e0bb1da81f91a28a822dee6e113ca82db76072a5159c27e76632b770191065

  • SHA512

    cebc1fc2a8f617ad5847eb70e35f36d8fac4892546b25f29eed6a0ed2489e230c073903de6e2a121b5553a95e386e7cfef765bb1e964e3134fcf89b172624160

Score
10/10
wannacryransomwareworm

Malware Config

Targets

    • Target

      709460272380d30e81c5d1797b2ee1ab7fa62537.malware

    • Size

      5.0MB

    • MD5

      a35833d30e65f9a68a74f86f0b432b0e

    • SHA1

      709460272380d30e81c5d1797b2ee1ab7fa62537

    • SHA256

      03e0bb1da81f91a28a822dee6e113ca82db76072a5159c27e76632b770191065

    • SHA512

      cebc1fc2a8f617ad5847eb70e35f36d8fac4892546b25f29eed6a0ed2489e230c073903de6e2a121b5553a95e386e7cfef765bb1e964e3134fcf89b172624160

    Score
    10/10
    wannacryransomwareworm

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks