Overview

overview

10

Static

static

3df8f4f113...7a.dll

windows7_x64

10

3df8f4f113...7a.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3df8f4f1133965ed8ebe123a8e5565e20d10313c7ca7b3834f530c5ba3f6187a

  • Size

    5.0MB

  • Sample

    220701-q5jefagdh4

  • MD5

    740b034f58fcaea5e65b5da0c148a3aa

  • SHA1

    1af775bb36845c3050e05ae9da4074430b8320d2

  • SHA256

    3df8f4f1133965ed8ebe123a8e5565e20d10313c7ca7b3834f530c5ba3f6187a

  • SHA512

    cc012c8cbdddae2c70617780b03f5f052745c502b195a083527833d82751328a04e7cf2b20f9d3ee13140dd381bb32dbbc82887b92551eba98b03351db70eccf

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      3df8f4f1133965ed8ebe123a8e5565e20d10313c7ca7b3834f530c5ba3f6187a

    • Size

      5.0MB

    • MD5

      740b034f58fcaea5e65b5da0c148a3aa

    • SHA1

      1af775bb36845c3050e05ae9da4074430b8320d2

    • SHA256

      3df8f4f1133965ed8ebe123a8e5565e20d10313c7ca7b3834f530c5ba3f6187a

    • SHA512

      cc012c8cbdddae2c70617780b03f5f052745c502b195a083527833d82751328a04e7cf2b20f9d3ee13140dd381bb32dbbc82887b92551eba98b03351db70eccf

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3214) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1267) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

3
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks