Overview

overview

10

Static

static

bd3e9d2bd7...f3.exe

windows7_x64

10

bd3e9d2bd7...f3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd3e9d2bd72e399554ba0588778b179e94c3179f7ff32b9c7cdd542731247ff3

  • Size

    2.2MB

  • Sample

    220625-ga6rtaacc9

  • MD5

    6bfa175e3cbd626ef26394826edb0fdf

  • SHA1

    5baaa75467b69d3ead87a6123512e56d78377940

  • SHA256

    bd3e9d2bd72e399554ba0588778b179e94c3179f7ff32b9c7cdd542731247ff3

  • SHA512

    70bffc468c6aae80ddf98c1e54097b3a3e1278c7fa118b28d4116ba95a1d769b4d622586d946b7ec62002539bf0915badeaeb164e0419c5e618262fbb3c432f6

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      bd3e9d2bd72e399554ba0588778b179e94c3179f7ff32b9c7cdd542731247ff3

    • Size

      2.2MB

    • MD5

      6bfa175e3cbd626ef26394826edb0fdf

    • SHA1

      5baaa75467b69d3ead87a6123512e56d78377940

    • SHA256

      bd3e9d2bd72e399554ba0588778b179e94c3179f7ff32b9c7cdd542731247ff3

    • SHA512

      70bffc468c6aae80ddf98c1e54097b3a3e1278c7fa118b28d4116ba95a1d769b4d622586d946b7ec62002539bf0915badeaeb164e0419c5e618262fbb3c432f6

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2562) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (946) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

2
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks