Overview

overview

10

Static

static

6a82161963...22.exe

windows7-x64

10

6a82161963...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a8216196347a0a8e4c92b7aa1fba290e76943712b74c78a668f992948883422

  • Size

    2.2MB

  • Sample

    221010-e22aasagdq

  • MD5

    846a646b3ab56a718c8d100296e41c3e

  • SHA1

    4627336d61926eda846c49c9d3ea229ed477ab94

  • SHA256

    6a8216196347a0a8e4c92b7aa1fba290e76943712b74c78a668f992948883422

  • SHA512

    38f802c430a9927b39929a50e8d57e5e2c615fe0a0422a6c26073ad0b96d53fa67bac32194582f15cdb393f594a8c666288886b1bcf043e39c9cfef7dd9a4bb9

  • SSDEEP

    49152:QnsQqMSPbcBVQej/1INRx+TSqTdX1HkQ:Q/qPoBhz1aRxcSUDk

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      6a8216196347a0a8e4c92b7aa1fba290e76943712b74c78a668f992948883422

    • Size

      2.2MB

    • MD5

      846a646b3ab56a718c8d100296e41c3e

    • SHA1

      4627336d61926eda846c49c9d3ea229ed477ab94

    • SHA256

      6a8216196347a0a8e4c92b7aa1fba290e76943712b74c78a668f992948883422

    • SHA512

      38f802c430a9927b39929a50e8d57e5e2c615fe0a0422a6c26073ad0b96d53fa67bac32194582f15cdb393f594a8c666288886b1bcf043e39c9cfef7dd9a4bb9

    • SSDEEP

      49152:QnsQqMSPbcBVQej/1INRx+TSqTdX1HkQ:Q/qPoBhz1aRxcSUDk

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3317) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (982) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

3
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks