Overview

overview

10

Static

static

2bfe9a5e9b...7d.dll

windows7-x64

10

2bfe9a5e9b...7d.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bfe9a5e9b307d896d929545a205dc7d

  • Size

    5.0MB

  • Sample

    220720-cqp2sabceq

  • MD5

    2bfe9a5e9b307d896d929545a205dc7d

  • SHA1

    66f9ab40f7d07ddef894d50032c3f0b77a438829

  • SHA256

    ccfff209ef11bf970e278da054a4e34f59bfb374af54f6a2d1e020849afdde4f

  • SHA512

    614501b5db44601e7a06ef0089742be51f60beb2173d55c686ebc1df05b3fdeb5afe51f329cbe81a73abb71715fcf98e0355200ab91a014db7580b62fc2d5ab9

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2bfe9a5e9b307d896d929545a205dc7d

    • Size

      5.0MB

    • MD5

      2bfe9a5e9b307d896d929545a205dc7d

    • SHA1

      66f9ab40f7d07ddef894d50032c3f0b77a438829

    • SHA256

      ccfff209ef11bf970e278da054a4e34f59bfb374af54f6a2d1e020849afdde4f

    • SHA512

      614501b5db44601e7a06ef0089742be51f60beb2173d55c686ebc1df05b3fdeb5afe51f329cbe81a73abb71715fcf98e0355200ab91a014db7580b62fc2d5ab9

    Score
    10/10
    wannacryransomwarewormdiscovery

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3154) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks