Overview

overview

10

Static

static

f09f4be000...ff.exe

windows7-x64

10

f09f4be000...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f09f4be000296548d71b82d326115fff

  • Size

    2.2MB

  • Sample

    220825-yckqsshhgj

  • MD5

    f09f4be000296548d71b82d326115fff

  • SHA1

    ee85f8d32e9cca9baee629a49676973f293f5c66

  • SHA256

    10c46f318b13dac0d8b3f7a44053432d7c01b8efeea9385dadb011a273cee1ee

  • SHA512

    c6972807e481cebc259f1d95b4397f51d50a42d7776df3b196f6d133d1435f4ccc49a0d9ece158b05ddff753d0af477b7d71e3100a26f38139ff7aa96d208f13

  • SSDEEP

    49152:wnpEKUv9wC7+VQej/1INRx+TSqTdX1HkQo6SA:wpyv+Fhz1aRxcSUDk36SA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      f09f4be000296548d71b82d326115fff

    • Size

      2.2MB

    • MD5

      f09f4be000296548d71b82d326115fff

    • SHA1

      ee85f8d32e9cca9baee629a49676973f293f5c66

    • SHA256

      10c46f318b13dac0d8b3f7a44053432d7c01b8efeea9385dadb011a273cee1ee

    • SHA512

      c6972807e481cebc259f1d95b4397f51d50a42d7776df3b196f6d133d1435f4ccc49a0d9ece158b05ddff753d0af477b7d71e3100a26f38139ff7aa96d208f13

    • SSDEEP

      49152:wnpEKUv9wC7+VQej/1INRx+TSqTdX1HkQo6SA:wpyv+Fhz1aRxcSUDk36SA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3223) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1051) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

3
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks