Overview

overview

10

Static

static

7ab45db1a6...2c.dll

windows7-x64

10

7ab45db1a6...2c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ab45db1a6c5448e4674510864a43d1a501a3b5a87608c9844c1a23f5bc4c52c.dll

  • Size

    5.0MB

  • Sample

    221012-qznf7sdgc7

  • MD5

    f1109f47b51584690316f1b6ac6d267d

  • SHA1

    b2c1e303b9d58bad3331f96066025319d276f639

  • SHA256

    7ab45db1a6c5448e4674510864a43d1a501a3b5a87608c9844c1a23f5bc4c52c

  • SHA512

    990b3a3cd8d12634cc856a44661257d28ca0d0af1397f62f19f1348cf4cf43eb3f06d1d383f79c70bac433bbefd8041ebd0f2a9b82a17dc1ff58c4d5d35d9fb7

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      7ab45db1a6c5448e4674510864a43d1a501a3b5a87608c9844c1a23f5bc4c52c.dll

    • Size

      5.0MB

    • MD5

      f1109f47b51584690316f1b6ac6d267d

    • SHA1

      b2c1e303b9d58bad3331f96066025319d276f639

    • SHA256

      7ab45db1a6c5448e4674510864a43d1a501a3b5a87608c9844c1a23f5bc4c52c

    • SHA512

      990b3a3cd8d12634cc856a44661257d28ca0d0af1397f62f19f1348cf4cf43eb3f06d1d383f79c70bac433bbefd8041ebd0f2a9b82a17dc1ff58c4d5d35d9fb7

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (1206) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

1
T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks