General

  • Target

    3306137b572036b9253e044ca7d2c922f03b2835b8c94d28d9d87c3d676d9060

  • Size

    5.0MB

  • Sample

    220620-eprv4adhbn

  • MD5

    9274127ad34be955589aec0d24f20656

  • SHA1

    4240e7fa37b2eb26144ac633a323ee6f5d92f76a

  • SHA256

    3306137b572036b9253e044ca7d2c922f03b2835b8c94d28d9d87c3d676d9060

  • SHA512

    032f8568aa686317df1966ba4ef2cf267caf5823ccfd159996ea0613d61db04b72e7197d0ed51e58aa5e8033c05a08ac5237e2ee5a8fe875e4c22843f6a0aa33

Malware Config

Targets

    • Target

      3306137b572036b9253e044ca7d2c922f03b2835b8c94d28d9d87c3d676d9060

    • Size

      5.0MB

    • MD5

      9274127ad34be955589aec0d24f20656

    • SHA1

      4240e7fa37b2eb26144ac633a323ee6f5d92f76a

    • SHA256

      3306137b572036b9253e044ca7d2c922f03b2835b8c94d28d9d87c3d676d9060

    • SHA512

      032f8568aa686317df1966ba4ef2cf267caf5823ccfd159996ea0613d61db04b72e7197d0ed51e58aa5e8033c05a08ac5237e2ee5a8fe875e4c22843f6a0aa33

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (2366) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Contacts a large (1070) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks