Overview

overview

10

Static

static

d95b717834...04.exe

windows7-x64

10

d95b717834...04.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d95b7178341763577fd36164ea2f182a9b5fbec7f1d8ca9beed46b6071e05104

  • Size

    3.6MB

  • Sample

    221016-abf48agfa3

  • MD5

    5417d5e6a0d2c6c0537457e575ad78fe

  • SHA1

    ca19a2c7db93dfa3324b3c5c87ff155f31c43858

  • SHA256

    d95b7178341763577fd36164ea2f182a9b5fbec7f1d8ca9beed46b6071e05104

  • SHA512

    3a75261571554f68f761afe86239da8ba3952b0f32d0bc2b564c0b7ef7f82552c2f2e9d6a831d545a22f171a9b38907fbdcfdf8f97b8917f193dd1eb24f3e05e

  • SSDEEP

    12288:GvbLgPluCtgQhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+D:2bLgdrgQhfdmMSirYbcMNgef0

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      d95b7178341763577fd36164ea2f182a9b5fbec7f1d8ca9beed46b6071e05104

    • Size

      3.6MB

    • MD5

      5417d5e6a0d2c6c0537457e575ad78fe

    • SHA1

      ca19a2c7db93dfa3324b3c5c87ff155f31c43858

    • SHA256

      d95b7178341763577fd36164ea2f182a9b5fbec7f1d8ca9beed46b6071e05104

    • SHA512

      3a75261571554f68f761afe86239da8ba3952b0f32d0bc2b564c0b7ef7f82552c2f2e9d6a831d545a22f171a9b38907fbdcfdf8f97b8917f193dd1eb24f3e05e

    • SSDEEP

      12288:GvbLgPluCtgQhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+D:2bLgdrgQhfdmMSirYbcMNgef0

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3204) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1016) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks