Overview

overview

10

Static

static

5fabf85335...02.exe

windows7-x64

10

5fabf85335...02.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5fabf85335b2f4130db5d4c06c46227f1b088acab7ec6b135f09eefe7c205402

  • Size

    3.6MB

  • Sample

    221102-qyxcqahbg2

  • MD5

    ea604ab52e4d480b1770e359167904b3

  • SHA1

    1dca46a3c5da246ac68f51afd4442b177890df63

  • SHA256

    5fabf85335b2f4130db5d4c06c46227f1b088acab7ec6b135f09eefe7c205402

  • SHA512

    b19fc5fd89d6ee91bde230f507f8ad01bcc51a2856d229e145b16b49b55e34c0f1185c3f9e0bf0e75a315f992482f491122ed9c367e495b989f5b508922c375a

  • SSDEEP

    12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHeQYSUj:2bLgddQhfdmMSirYbcMNgef0QeQ

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      5fabf85335b2f4130db5d4c06c46227f1b088acab7ec6b135f09eefe7c205402

    • Size

      3.6MB

    • MD5

      ea604ab52e4d480b1770e359167904b3

    • SHA1

      1dca46a3c5da246ac68f51afd4442b177890df63

    • SHA256

      5fabf85335b2f4130db5d4c06c46227f1b088acab7ec6b135f09eefe7c205402

    • SHA512

      b19fc5fd89d6ee91bde230f507f8ad01bcc51a2856d229e145b16b49b55e34c0f1185c3f9e0bf0e75a315f992482f491122ed9c367e495b989f5b508922c375a

    • SSDEEP

      12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHeQYSUj:2bLgddQhfdmMSirYbcMNgef0QeQ

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3290) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1329) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks