Overview

overview

10

Static

static

aff35c9b89...2d.dll

windows7-x64

10

aff35c9b89...2d.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aff35c9b8953d54a95fd76f52eb5ab2d

  • Size

    5.0MB

  • Sample

    220720-b5v1xaagcp

  • MD5

    aff35c9b8953d54a95fd76f52eb5ab2d

  • SHA1

    7c6e8f3e71c256ae603b98b92bedcdbc43705f6e

  • SHA256

    b315819dc4e13a7a9c99322ad0cbb61229afb5fc8682aa4976e8df88fdb2f744

  • SHA512

    35188b87be82fe93c6db61f3ca10d8eaa360c52e27ecab9127ee578f2fe2fc6e973f46d02a128e81fb9d8263f3cd2af3f93981bc1cb38d52c2dcd4422ade4e3f

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      aff35c9b8953d54a95fd76f52eb5ab2d

    • Size

      5.0MB

    • MD5

      aff35c9b8953d54a95fd76f52eb5ab2d

    • SHA1

      7c6e8f3e71c256ae603b98b92bedcdbc43705f6e

    • SHA256

      b315819dc4e13a7a9c99322ad0cbb61229afb5fc8682aa4976e8df88fdb2f744

    • SHA512

      35188b87be82fe93c6db61f3ca10d8eaa360c52e27ecab9127ee578f2fe2fc6e973f46d02a128e81fb9d8263f3cd2af3f93981bc1cb38d52c2dcd4422ade4e3f

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3339) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1241) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks