Overview

overview

10

Static

static

cacb2a48f2...85.dll

windows7-x64

10

cacb2a48f2...85.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cacb2a48f2f0d9fed0978553ada02585

  • Size

    5.0MB

  • Sample

    220720-b7j2esagem

  • MD5

    cacb2a48f2f0d9fed0978553ada02585

  • SHA1

    d080c08152e3cc0b5eab203c7888ea83f0fb39fd

  • SHA256

    f85995311dbb4213721bf69b5da46b1bff5870720e271be6997def68a344ecab

  • SHA512

    26e5eaddfee4b3582c296f0e88b4f0d1079d3887aa8c04e0119a1ebbb71de8cdf322c12509612ffaca2c0a8592d0f068a0251c10d7a35774196bf113cd125181

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      cacb2a48f2f0d9fed0978553ada02585

    • Size

      5.0MB

    • MD5

      cacb2a48f2f0d9fed0978553ada02585

    • SHA1

      d080c08152e3cc0b5eab203c7888ea83f0fb39fd

    • SHA256

      f85995311dbb4213721bf69b5da46b1bff5870720e271be6997def68a344ecab

    • SHA512

      26e5eaddfee4b3582c296f0e88b4f0d1079d3887aa8c04e0119a1ebbb71de8cdf322c12509612ffaca2c0a8592d0f068a0251c10d7a35774196bf113cd125181

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3219) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1274) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks