General

  • Target

    1200de7b4adf66300ea22172fad7ed9a

  • Size

    3.6MB

  • Sample

    220825-yakysaafg6

  • MD5

    1200de7b4adf66300ea22172fad7ed9a

  • SHA1

    f4a8b2e179251f5b0912150610a215879f16051e

  • SHA256

    c75746cd94a393cee3ad01a000e53cac2965cc7a70889a325dadc62a2018fdc1

  • SHA512

    d2e9e576604667690b0c7eb2a27a8e8b84c37e84ff42d79b40235c7c021218f5578a9955c7f7e8ef722e748949dd1c65a179ef578b0145e3f3c5375c783420bd

  • SSDEEP

    49152:2nAQqMSPbcBVkAMEcaEau3R8yAH1plAHI:yDqPoB2593R8yAVp2HI

Malware Config

Targets

    • Target

      1200de7b4adf66300ea22172fad7ed9a

    • Size

      3.6MB

    • MD5

      1200de7b4adf66300ea22172fad7ed9a

    • SHA1

      f4a8b2e179251f5b0912150610a215879f16051e

    • SHA256

      c75746cd94a393cee3ad01a000e53cac2965cc7a70889a325dadc62a2018fdc1

    • SHA512

      d2e9e576604667690b0c7eb2a27a8e8b84c37e84ff42d79b40235c7c021218f5578a9955c7f7e8ef722e748949dd1c65a179ef578b0145e3f3c5375c783420bd

    • SSDEEP

      49152:2nAQqMSPbcBVkAMEcaEau3R8yAH1plAHI:yDqPoB2593R8yAVp2HI

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (2577) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Contacts a large (1259) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Network Service Scanning

2
T1046

Tasks