Overview

overview

10

Static

static

3

0064a5e1fb...9e.dll

windows7-x64

10

0064a5e1fb...9e.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0064a5e1fb383f45293db229e.exe

  • Size

    5.0MB

  • Sample

    230712-j2qk1sce33

  • MD5

    7f429a8e660c28fa4465412a37fa4a4e

  • SHA1

    153b73e368b2e2355fa7999b053068cd8859b771

  • SHA256

    0064a5e1fb383f45293db229eacb793dce0e9a94a40778307b012f1c4c062b6b

  • SHA512

    2e622930fc3779f5ec5c9d9b6fda047d1a9e8781a39d25403f7a2e4b2e468badc0cd53f7624865fe6ce5bf2001030ac1e83c98b6fc8f3f251bcf7ad7648c00fd

  • SSDEEP

    49152:RnNQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:1WqPoBhz1aRxcSUDk36SA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      0064a5e1fb383f45293db229e.exe

    • Size

      5.0MB

    • MD5

      7f429a8e660c28fa4465412a37fa4a4e

    • SHA1

      153b73e368b2e2355fa7999b053068cd8859b771

    • SHA256

      0064a5e1fb383f45293db229eacb793dce0e9a94a40778307b012f1c4c062b6b

    • SHA512

      2e622930fc3779f5ec5c9d9b6fda047d1a9e8781a39d25403f7a2e4b2e468badc0cd53f7624865fe6ce5bf2001030ac1e83c98b6fc8f3f251bcf7ad7648c00fd

    • SSDEEP

      49152:RnNQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:1WqPoBhz1aRxcSUDk36SA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3038) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1507) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks