Overview

overview

10

Static

static

3

5731423bdd...f4.dll

windows7-x64

10

5731423bdd...f4.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5731423bdd4b80b4e8a1909abef784f4

  • Size

    5.0MB

  • Sample

    231222-dd6pfahegp

  • MD5

    5731423bdd4b80b4e8a1909abef784f4

  • SHA1

    eb81706c0a8ba8374968aaa221bf09ade1e12f00

  • SHA256

    0373ca1f4a99994da7eda257fcf8bd7050a126287e1cbae051a063df5abe4959

  • SHA512

    e9aac8251a2f16678465fd20cbe7742087a66921cc7505fca5c053a5a189c4b2f92c8dcf8230dad758b84a1f98e3a234469c69aa4b4d1afaf7ccae9b5c946474

  • SSDEEP

    49152:RnhqMSPbcBVQej/1INRx+TSqTdd1HkQo6SAARdhn:1hqPoBhz1aRxcSUZk36SAEdh

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      5731423bdd4b80b4e8a1909abef784f4

    • Size

      5.0MB

    • MD5

      5731423bdd4b80b4e8a1909abef784f4

    • SHA1

      eb81706c0a8ba8374968aaa221bf09ade1e12f00

    • SHA256

      0373ca1f4a99994da7eda257fcf8bd7050a126287e1cbae051a063df5abe4959

    • SHA512

      e9aac8251a2f16678465fd20cbe7742087a66921cc7505fca5c053a5a189c4b2f92c8dcf8230dad758b84a1f98e3a234469c69aa4b4d1afaf7ccae9b5c946474

    • SSDEEP

      49152:RnhqMSPbcBVQej/1INRx+TSqTdd1HkQo6SAARdhn:1hqPoBhz1aRxcSUZk36SAEdh

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (681) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks