Overview

overview

10

Static

static

b075ffe978...d0.dll

windows7-x64

10

b075ffe978...d0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b075ffe9788c0befe9ba892d0844bfd0

  • Size

    5.0MB

  • Sample

    220720-dt7axabhel

  • MD5

    b075ffe9788c0befe9ba892d0844bfd0

  • SHA1

    84e32ea54473058cb16a201a4ced98da96cb1046

  • SHA256

    97df26af59eb3281d408e663ad03a4b035d355b5a61180fc1f56ffad6fa3cb46

  • SHA512

    91163e3658ad204f2b7d79758f3bc0f78ce07e1d75108a9df9f823baeea91ba1713415075d02b32d688318e1d1331debcabe66e063c7d98a28374499fc6fa039

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      b075ffe9788c0befe9ba892d0844bfd0

    • Size

      5.0MB

    • MD5

      b075ffe9788c0befe9ba892d0844bfd0

    • SHA1

      84e32ea54473058cb16a201a4ced98da96cb1046

    • SHA256

      97df26af59eb3281d408e663ad03a4b035d355b5a61180fc1f56ffad6fa3cb46

    • SHA512

      91163e3658ad204f2b7d79758f3bc0f78ce07e1d75108a9df9f823baeea91ba1713415075d02b32d688318e1d1331debcabe66e063c7d98a28374499fc6fa039

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3326) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1201) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks