Overview

overview

10

Static

static

c881745e13...20.dll

windows7-x64

10

c881745e13...20.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c881745e136cd982aee1cb9edffb0020

  • Size

    5.0MB

  • Sample

    220720-djf1zabbf8

  • MD5

    c881745e136cd982aee1cb9edffb0020

  • SHA1

    962cd2f8af7855570494551376341e548fecc0ea

  • SHA256

    6086ceb5624ff6f841f35a6b75ae823288e7385c2ab3076b45e35a7b961c4da7

  • SHA512

    67c689326c4f7b6b4209cdfb22283551f782be71f2cd6119b4fb4abe7fa019c5f47f475ffc55429bdfcd8f87a105e5ead1552b0079347648e7cf658e7bb0b5dd

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      c881745e136cd982aee1cb9edffb0020

    • Size

      5.0MB

    • MD5

      c881745e136cd982aee1cb9edffb0020

    • SHA1

      962cd2f8af7855570494551376341e548fecc0ea

    • SHA256

      6086ceb5624ff6f841f35a6b75ae823288e7385c2ab3076b45e35a7b961c4da7

    • SHA512

      67c689326c4f7b6b4209cdfb22283551f782be71f2cd6119b4fb4abe7fa019c5f47f475ffc55429bdfcd8f87a105e5ead1552b0079347648e7cf658e7bb0b5dd

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3188) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1005) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks