Overview

overview

10

Static

static

37b5543ffe...31.dll

windows7_x64

10

37b5543ffe...31.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37b5543ffedb77305379e07c4e17b637e52e6cfc26669357e15fa8388a051e31

  • Size

    5.0MB

  • Sample

    220625-2bx7aageb3

  • MD5

    0e6c5008129bb859f0a760e1167f4097

  • SHA1

    f8bea1b72244172d15da1a4ee05d013db287abc4

  • SHA256

    37b5543ffedb77305379e07c4e17b637e52e6cfc26669357e15fa8388a051e31

  • SHA512

    40fa30544386a46297ebeaea229e52fb459135314df7b0119bc3275ee2b6d03aed6a183da343652d335edd168b414c17a34ab807971e4c8ad450e6b0bbb1e4b1

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      37b5543ffedb77305379e07c4e17b637e52e6cfc26669357e15fa8388a051e31

    • Size

      5.0MB

    • MD5

      0e6c5008129bb859f0a760e1167f4097

    • SHA1

      f8bea1b72244172d15da1a4ee05d013db287abc4

    • SHA256

      37b5543ffedb77305379e07c4e17b637e52e6cfc26669357e15fa8388a051e31

    • SHA512

      40fa30544386a46297ebeaea229e52fb459135314df7b0119bc3275ee2b6d03aed6a183da343652d335edd168b414c17a34ab807971e4c8ad450e6b0bbb1e4b1

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2722) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1243) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

3
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks