Overview

overview

10

Static

static

9e4a6f26c5...29.dll

windows7-x64

10

9e4a6f26c5...29.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e4a6f26c52a6194617686a8230e1229

  • Size

    5.0MB

  • Sample

    220720-a8my2aaddm

  • MD5

    9e4a6f26c52a6194617686a8230e1229

  • SHA1

    446960a5a82c51079153131f4301bd60d4ae36d5

  • SHA256

    84dd81ba8404984dabc7e490baccd6aa0185a41198715025d84e20c89f6c4d20

  • SHA512

    c155751d429a318aab97c5c4e0a15787c03c705e05e6c68950f0e2008ebc3721496287b4bf26af243cb54efbf5ec1a3978e1d8a82b8a6d478664c16341024eb1

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      9e4a6f26c52a6194617686a8230e1229

    • Size

      5.0MB

    • MD5

      9e4a6f26c52a6194617686a8230e1229

    • SHA1

      446960a5a82c51079153131f4301bd60d4ae36d5

    • SHA256

      84dd81ba8404984dabc7e490baccd6aa0185a41198715025d84e20c89f6c4d20

    • SHA512

      c155751d429a318aab97c5c4e0a15787c03c705e05e6c68950f0e2008ebc3721496287b4bf26af243cb54efbf5ec1a3978e1d8a82b8a6d478664c16341024eb1

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2500) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (992) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks