Overview

overview

10

Static

static

4c35693cad...c5.dll

windows7-x64

10

4c35693cad...c5.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c35693cadb792e90bdddc8380b842c5

  • Size

    5.0MB

  • Sample

    220720-brs96aafbj

  • MD5

    4c35693cadb792e90bdddc8380b842c5

  • SHA1

    746a147d80ad18a14675cd3ac6ab36732b005993

  • SHA256

    ec29f4db6e43c8bfad91f4d2910c6db42b975d33f7a51c69ea9e0dc9d400584f

  • SHA512

    74ae721343082477fc09ef865d595c2150b085bea7e935e52587946da0ac0f54296a85cacdd37c9b70518668ffaf55012e8f21feade02a433363217d92544630

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      4c35693cadb792e90bdddc8380b842c5

    • Size

      5.0MB

    • MD5

      4c35693cadb792e90bdddc8380b842c5

    • SHA1

      746a147d80ad18a14675cd3ac6ab36732b005993

    • SHA256

      ec29f4db6e43c8bfad91f4d2910c6db42b975d33f7a51c69ea9e0dc9d400584f

    • SHA512

      74ae721343082477fc09ef865d595c2150b085bea7e935e52587946da0ac0f54296a85cacdd37c9b70518668ffaf55012e8f21feade02a433363217d92544630

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3079) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1306) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks