General

  • Target

    7e5b98daf51eaa5f285d112b5ce0bb80

  • Size

    5.0MB

  • Sample

    220720-janx4sdfam

  • MD5

    7e5b98daf51eaa5f285d112b5ce0bb80

  • SHA1

    2ed87fccf06657df51e7d66100992e458a49e4c3

  • SHA256

    b3227864c2c2822f1a4b1676fea556710fc4dc31199bc3e89e4d35d120d733ae

  • SHA512

    53670ea49d10a2806c133f74ea55e09afb108e358174a266d193b0222df4ae15c020ad62dab115d03c4d7e1cd57bd53c3546e48d08a907fae949c1eae166bb1b

Malware Config

Targets

    • Target

      7e5b98daf51eaa5f285d112b5ce0bb80

    • Size

      5.0MB

    • MD5

      7e5b98daf51eaa5f285d112b5ce0bb80

    • SHA1

      2ed87fccf06657df51e7d66100992e458a49e4c3

    • SHA256

      b3227864c2c2822f1a4b1676fea556710fc4dc31199bc3e89e4d35d120d733ae

    • SHA512

      53670ea49d10a2806c133f74ea55e09afb108e358174a266d193b0222df4ae15c020ad62dab115d03c4d7e1cd57bd53c3546e48d08a907fae949c1eae166bb1b

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3254) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Contacts a large (1131) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks