Overview

overview

10

Static

static

8131785432...94.exe

windows7-x64

10

8131785432...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8131785432fc57c25d29b6c9e04a7f2f0379c123ad89ce1e6d50af7e5cd3e394

  • Size

    5.0MB

  • Sample

    221012-d8tncscce7

  • MD5

    8a6b804142e22265de773a3abf0bd047

  • SHA1

    10ff8adbc4d1a8302e31cee6913c8f14d0a78387

  • SHA256

    8131785432fc57c25d29b6c9e04a7f2f0379c123ad89ce1e6d50af7e5cd3e394

  • SHA512

    6561f9dbc736bdafb992bf24d28d2bce8d103468e75db3eaeb8df255e5cf763378c79d20938a573b2b0c65bfb59c342d04149267bbc06381cb3a1d0ae6a909af

  • SSDEEP

    12288:M1bLgmluCti62lIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHeQYSUjEXFh:qbLguripdmMSirYbcMNgef0QeQjG

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      8131785432fc57c25d29b6c9e04a7f2f0379c123ad89ce1e6d50af7e5cd3e394

    • Size

      5.0MB

    • MD5

      8a6b804142e22265de773a3abf0bd047

    • SHA1

      10ff8adbc4d1a8302e31cee6913c8f14d0a78387

    • SHA256

      8131785432fc57c25d29b6c9e04a7f2f0379c123ad89ce1e6d50af7e5cd3e394

    • SHA512

      6561f9dbc736bdafb992bf24d28d2bce8d103468e75db3eaeb8df255e5cf763378c79d20938a573b2b0c65bfb59c342d04149267bbc06381cb3a1d0ae6a909af

    • SSDEEP

      12288:M1bLgmluCti62lIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHeQYSUjEXFh:qbLguripdmMSirYbcMNgef0QeQjG

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3084) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (888) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

3
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks