Overview

overview

10

Static

static

769ec37bc4...52.dll

windows7-x64

10

769ec37bc4...52.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    769ec37bc4de51581ea222ef38d4f752

  • Size

    5.0MB

  • Sample

    220720-bnd13aaad8

  • MD5

    769ec37bc4de51581ea222ef38d4f752

  • SHA1

    3db70422149469e299bf15a45bf4c6bc97a7031c

  • SHA256

    0ca55fe01cf52696f424100ee6de4e8dd262ce1c83257d22bc3edc42c30fb944

  • SHA512

    695c79e1e0bef5395f78928b4275d927d0c3570554f976743235ca93299bc615a5a6408cfc68b19ad9ff6b8330bfef0f21221d048c2d210392796b267a022a24

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      769ec37bc4de51581ea222ef38d4f752

    • Size

      5.0MB

    • MD5

      769ec37bc4de51581ea222ef38d4f752

    • SHA1

      3db70422149469e299bf15a45bf4c6bc97a7031c

    • SHA256

      0ca55fe01cf52696f424100ee6de4e8dd262ce1c83257d22bc3edc42c30fb944

    • SHA512

      695c79e1e0bef5395f78928b4275d927d0c3570554f976743235ca93299bc615a5a6408cfc68b19ad9ff6b8330bfef0f21221d048c2d210392796b267a022a24

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3280) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (989) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks