Overview

overview

10

Static

static

7a0631216e...b4.dll

windows7-x64

10

7a0631216e...b4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a0631216e7e0807a155539dc0bfd8b4

  • Size

    5.0MB

  • Sample

    220720-a5sp4shha9

  • MD5

    7a0631216e7e0807a155539dc0bfd8b4

  • SHA1

    fca36ac2c4a36fffa978655d46337465cba30cb1

  • SHA256

    2c45e11f3ae6d3a9d81dbb079902ef99737b24b58d34d7c03a23ed8494c9f8a2

  • SHA512

    11261fdcb99e1809c341134129fbc80d5ffa68f0ea49c37ab11e4b36a96b7aed81881bb1ad063e3999020614aea270724940dafb7d4d545d10a367c7f15f7319

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      7a0631216e7e0807a155539dc0bfd8b4

    • Size

      5.0MB

    • MD5

      7a0631216e7e0807a155539dc0bfd8b4

    • SHA1

      fca36ac2c4a36fffa978655d46337465cba30cb1

    • SHA256

      2c45e11f3ae6d3a9d81dbb079902ef99737b24b58d34d7c03a23ed8494c9f8a2

    • SHA512

      11261fdcb99e1809c341134129fbc80d5ffa68f0ea49c37ab11e4b36a96b7aed81881bb1ad063e3999020614aea270724940dafb7d4d545d10a367c7f15f7319

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3269) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1218) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks