General

  • Target

    b2dc270ec47b253b1100b682bc99a22a

  • Size

    5.0MB

  • Sample

    220720-h4yhzadad9

  • MD5

    b2dc270ec47b253b1100b682bc99a22a

  • SHA1

    6349f1d8a64865136fd027fd11be3db8724216ed

  • SHA256

    7a621a86622e650d7a35f655f521ca4193c7e1b11e2bcad472b47bae8810b60d

  • SHA512

    1b23d0e5f95ee800eef651ce9e9f6a9f4bd057afd0eebdc75ae52375ea85071d6d4750d971a5d1e28dd0c79bc2eed773c513deb3a1a3c1d0f3219a37f17f71b2

Malware Config

Targets

    • Target

      b2dc270ec47b253b1100b682bc99a22a

    • Size

      5.0MB

    • MD5

      b2dc270ec47b253b1100b682bc99a22a

    • SHA1

      6349f1d8a64865136fd027fd11be3db8724216ed

    • SHA256

      7a621a86622e650d7a35f655f521ca4193c7e1b11e2bcad472b47bae8810b60d

    • SHA512

      1b23d0e5f95ee800eef651ce9e9f6a9f4bd057afd0eebdc75ae52375ea85071d6d4750d971a5d1e28dd0c79bc2eed773c513deb3a1a3c1d0f3219a37f17f71b2

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3136) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Contacts a large (1297) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks