General

  • Target
    dc7a903e44cda227a20486feeadb4341
  • Size 5.0MB
  • Sample220720-ajbvgahfe9
  • SHA256 42315a334dcd8401dc3e60c6de48071029105f978aa100384ef78fc2f6c8bf0b
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      dc7a903e44cda227a20486feeadb4341
    • Size 5.0MB
    • SHA256 42315a334dcd8401dc3e60c6de48071029105f978aa100384ef78fc2f6c8bf0b
    • MD5 SHA1 SHA512
    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3305) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Contacts a large (1192) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks