General

  • Target

    7a87205559b82056c17d8b49328603b4

  • Size

    5.0MB

  • Sample

    220825-x9pwcahhbj

  • MD5

    7a87205559b82056c17d8b49328603b4

  • SHA1

    7c328c8b5089a9dcacadee17aa112c950ccfd2ac

  • SHA256

    fb962ad75f9de6e4bac872c3095952c8099689ca70535ec09191d9dedfb7389f

  • SHA512

    f16c7c3192ceb0dd9a3d0a8ede7fbce631cfa5921fed1531c39d0c8077ffd1e858aac751426cdcddf9e9be19f06d39c08479ee69f00a6549ea482a4769c57d5c

  • SSDEEP

    24576:RbLgurgDdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmiHkH:RnsEMSPbcBVQej/1INRx+TSqTdX1HkQ

Malware Config

Targets

    • Target

      7a87205559b82056c17d8b49328603b4

    • Size

      5.0MB

    • MD5

      7a87205559b82056c17d8b49328603b4

    • SHA1

      7c328c8b5089a9dcacadee17aa112c950ccfd2ac

    • SHA256

      fb962ad75f9de6e4bac872c3095952c8099689ca70535ec09191d9dedfb7389f

    • SHA512

      f16c7c3192ceb0dd9a3d0a8ede7fbce631cfa5921fed1531c39d0c8077ffd1e858aac751426cdcddf9e9be19f06d39c08479ee69f00a6549ea482a4769c57d5c

    • SSDEEP

      24576:RbLgurgDdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmiHkH:RnsEMSPbcBVQej/1INRx+TSqTdX1HkQ

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3270) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Contacts a large (1268) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Network Service Scanning

3
T1046

Tasks