Overview

overview

10

Static

static

5bdd9c4ee8...52.dll

windows7-x64

10

5bdd9c4ee8...52.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5bdd9c4ee845c748d53c9ceb87bb1552

  • Size

    5.0MB

  • Sample

    220720-bws5ysafdq

  • MD5

    5bdd9c4ee845c748d53c9ceb87bb1552

  • SHA1

    6363c1c24ceae061fe847d470ad6a57df65eecbf

  • SHA256

    01354b983b9fdd062a07bc81eba06d4ba422a04417577f61949f4cbfef767777

  • SHA512

    4e737e3b9db8a8506aab1eb9d2329d3ceb8ceba53e82be4e71ddbfb09303674b5c51cbba16751d85548f734e88b7bfcab6b89d1bac1947d4ede9496e27285772

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      5bdd9c4ee845c748d53c9ceb87bb1552

    • Size

      5.0MB

    • MD5

      5bdd9c4ee845c748d53c9ceb87bb1552

    • SHA1

      6363c1c24ceae061fe847d470ad6a57df65eecbf

    • SHA256

      01354b983b9fdd062a07bc81eba06d4ba422a04417577f61949f4cbfef767777

    • SHA512

      4e737e3b9db8a8506aab1eb9d2329d3ceb8ceba53e82be4e71ddbfb09303674b5c51cbba16751d85548f734e88b7bfcab6b89d1bac1947d4ede9496e27285772

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3197) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1340) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks