Overview

overview

10

Static

static

f70f683677...77.dll

windows7-x64

10

f70f683677...77.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f70f68367735a050c124c5207ac02577

  • Size

    5.0MB

  • Sample

    220720-bth7zaafbp

  • MD5

    f70f68367735a050c124c5207ac02577

  • SHA1

    3e8691a6f0c5deda912d934a508af20a148d4e42

  • SHA256

    81451be49a0f49705f540f7a5df5cc7c517707fbf05a1a21ac0e21196f2aaa14

  • SHA512

    e88ace89016210be8685502f275bdc489254d18bdcf95e15b218edc2b8b69bb623eacd91e40b9dc0338a27d004b66b4a91017479eb066944bfcc1a35fa57681c

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      f70f68367735a050c124c5207ac02577

    • Size

      5.0MB

    • MD5

      f70f68367735a050c124c5207ac02577

    • SHA1

      3e8691a6f0c5deda912d934a508af20a148d4e42

    • SHA256

      81451be49a0f49705f540f7a5df5cc7c517707fbf05a1a21ac0e21196f2aaa14

    • SHA512

      e88ace89016210be8685502f275bdc489254d18bdcf95e15b218edc2b8b69bb623eacd91e40b9dc0338a27d004b66b4a91017479eb066944bfcc1a35fa57681c

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3192) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1269) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks