Overview

overview

10

Static

static

3

NEAS.30235...JC.exe

windows7-x64

10

NEAS.30235...JC.exe

windows10-2004-x64

10

Resubmissions

28/10/2023, 19:26

231028-x5tzhaeg8y 10

26/10/2023, 18:20

231026-wyy47sdh9w 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.30235085bcd5afbc844e3cf9d78006e3_JC.exe

  • Size

    3.6MB

  • Sample

    231026-wyy47sdh9w

  • MD5

    30235085bcd5afbc844e3cf9d78006e3

  • SHA1

    7f9690219070f24944a1a9f2e7bb362a8e956e28

  • SHA256

    10b23d03aef84f28d59650497790a1762af57eacb4f2f14d43ad82454c9cbdd0

  • SHA512

    b5da1d89ea5794010f7c8f72752e8f76358afdaaec33d8e398cc8dd1fc4ec7b8a7a4fbd34921dfab947cb5786d8be16990fa1ab2c21166a7563e00d619fd08be

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz662/jvvEHyS/oO/zlIrO:2nAQqMSPbcBVQej/1INRiSchlJ4pBUf

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      NEAS.30235085bcd5afbc844e3cf9d78006e3_JC.exe

    • Size

      3.6MB

    • MD5

      30235085bcd5afbc844e3cf9d78006e3

    • SHA1

      7f9690219070f24944a1a9f2e7bb362a8e956e28

    • SHA256

      10b23d03aef84f28d59650497790a1762af57eacb4f2f14d43ad82454c9cbdd0

    • SHA512

      b5da1d89ea5794010f7c8f72752e8f76358afdaaec33d8e398cc8dd1fc4ec7b8a7a4fbd34921dfab947cb5786d8be16990fa1ab2c21166a7563e00d619fd08be

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz662/jvvEHyS/oO/zlIrO:2nAQqMSPbcBVQej/1INRiSchlJ4pBUf

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3299) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (3312) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks