Overview

overview

10

Static

static

f9bb191df3...67.dll

windows7-x64

10

f9bb191df3...67.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9bb191df3e13520527531b1a9e84e67

  • Size

    5.0MB

  • Sample

    220720-cnes2abbep

  • MD5

    f9bb191df3e13520527531b1a9e84e67

  • SHA1

    e74d763240516866794aaa2ee07a57d4c2d6fc16

  • SHA256

    e07af232f7851ef5d455e8264e85a08ace52e83f532ff829a4afef31e074c2fa

  • SHA512

    fe803a89048368896681cb57ae4a602abdb2e1aea8c72d08cba7dc78e75e7be0714bec3d6662addb75fd82b02aa26c358ebe091315bb5d5a2890d532f61023dd

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      f9bb191df3e13520527531b1a9e84e67

    • Size

      5.0MB

    • MD5

      f9bb191df3e13520527531b1a9e84e67

    • SHA1

      e74d763240516866794aaa2ee07a57d4c2d6fc16

    • SHA256

      e07af232f7851ef5d455e8264e85a08ace52e83f532ff829a4afef31e074c2fa

    • SHA512

      fe803a89048368896681cb57ae4a602abdb2e1aea8c72d08cba7dc78e75e7be0714bec3d6662addb75fd82b02aa26c358ebe091315bb5d5a2890d532f61023dd

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3111) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1161) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks