Overview

overview

10

Static

static

Windows/MSSECSVC.exe

windows7_x64

10

Windows/MSSECSVC.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    155s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    25-06-2022 03:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Windows/MSSECSVC.exe

  • Size

    3.6MB

  • MD5

    03baffc5d9239b588a88d52978448db6

  • SHA1

    c9b9062f1fa1681481f0a787fbe1fe8b6b6d6486

  • SHA256

    09d086a2f16d620a4c4fd823651fa652f22eb27bb563b682d9372afa69f7662c

  • SHA512

    ae8eabb41df5a4d2cdf04929269e822e8d8911c5e891244d257e85b6013b6a8028938e3287132b2e1ec2edc8e2113f51f52ff2d4d77e54b83f9a730582abccf3

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Signatures

  • Wannacry

    WannaCry is a ransomware cryptoworm.

    ransomwarewormwannacry
  • Contacts a large (2374) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Executes dropped EXE 1 IoCs
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Windows\MSSECSVC.exe
    "C:\Users\Admin\AppData\Local\Temp\Windows\MSSECSVC.exe"
    1⤵
    • Drops file in Windows directory
    PID:2516
    • C:\WINDOWS\tasksche.exe
      C:\WINDOWS\tasksche.exe /i
      2⤵
      • Executes dropped EXE
      PID:2508
  • C:\Users\Admin\AppData\Local\Temp\Windows\MSSECSVC.exe
    C:\Users\Admin\AppData\Local\Temp\Windows\MSSECSVC.exe -m security
    1⤵
      PID:2252

    Network

    MITRE ATT&CK Matrix ATT&CK v6

    Initial Access

    Execution

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    Network Service Scanning

    1
    T1046

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Windows\tasksche.exe
      Filesize

      3.4MB

      MD5

      bc098c445c7a7bafbebb45d800754fba

      SHA1

      1d43eb2eda999ce9171b222b9a4934d660eb97c8

      SHA256

      7cb8c18228d47d6765dda8cf34b3b6acbdb91808fdf714b49d2eed8148354594

      SHA512

      7309b5d2daea8671a8670a73350bc4e35e6cf4cc1364210082428676615f509c4abb904baa60b4e2fdaf97998a14979232f6b439f2373505bc2f43d91f29c101

      Download Submit