Overview

overview

10

Static

static

dae9c05ada...59.dll

windows7-x64

10

dae9c05ada...59.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dae9c05ada51c81684edf190c0998e59

  • Size

    5.0MB

  • Sample

    220720-c6fhaabffn

  • MD5

    dae9c05ada51c81684edf190c0998e59

  • SHA1

    3944a29d4fd0d3331bf85496bb081d6b635522ea

  • SHA256

    48c84f29956e0f649d1c166f57143ed91de42da550f86eb48c9c3f718e0de38b

  • SHA512

    ceca1a16dc9031448b9dab64e384181a548efb24e85132e00ebadff7c62fa76f634c088e3dfa67f4aa2e0659727ac01d946fb0172c2addd4bae0283169e4c9da

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      dae9c05ada51c81684edf190c0998e59

    • Size

      5.0MB

    • MD5

      dae9c05ada51c81684edf190c0998e59

    • SHA1

      3944a29d4fd0d3331bf85496bb081d6b635522ea

    • SHA256

      48c84f29956e0f649d1c166f57143ed91de42da550f86eb48c9c3f718e0de38b

    • SHA512

      ceca1a16dc9031448b9dab64e384181a548efb24e85132e00ebadff7c62fa76f634c088e3dfa67f4aa2e0659727ac01d946fb0172c2addd4bae0283169e4c9da

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3175) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1240) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks