General

  • Target

    aca2a30bcaccf187b8dbd477747e168f21fc611006a8522fc656d7cd3cfdba36

  • Size

    5.0MB

  • Sample

    221101-gcjp3ahdhk

  • MD5

    34b2fff498fd17c625649b957373e676

  • SHA1

    b03a94807620159b69240e74aa6c88b8a36096e0

  • SHA256

    aca2a30bcaccf187b8dbd477747e168f21fc611006a8522fc656d7cd3cfdba36

  • SHA512

    4f726c0706d2aa682e4fdf625e428db0d9d629be6a53596a8348e32b38d7d1837a31bc0e8d9bf5e7b40113c833cdf8af6a95297e428da799dc09622d008b6b20

  • SSDEEP

    98304:d8qPoBhz18k36SAEdhvxWa9P593R8yAVp2H:d8qPe18k3ZAEUadzR8yc4H

Malware Config

Targets

    • Target

      aca2a30bcaccf187b8dbd477747e168f21fc611006a8522fc656d7cd3cfdba36

    • Size

      5.0MB

    • MD5

      34b2fff498fd17c625649b957373e676

    • SHA1

      b03a94807620159b69240e74aa6c88b8a36096e0

    • SHA256

      aca2a30bcaccf187b8dbd477747e168f21fc611006a8522fc656d7cd3cfdba36

    • SHA512

      4f726c0706d2aa682e4fdf625e428db0d9d629be6a53596a8348e32b38d7d1837a31bc0e8d9bf5e7b40113c833cdf8af6a95297e428da799dc09622d008b6b20

    • SSDEEP

      98304:d8qPoBhz18k36SAEdhvxWa9P593R8yAVp2H:d8qPe18k3ZAEUadzR8yc4H

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3155) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Contacts a large (1270) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks