Overview

overview

10

Static

static

3

220725-dddnnabfh8.dll

windows7-x64

10

220725-dddnnabfh8.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    220725-dddnnabfh8

  • Size

    5.0MB

  • Sample

    240320-l7xmmaeh8s

  • MD5

    1af38678dc693d8653223ae4856fd2a4

  • SHA1

    fa2dd12ab5ec307438b6fd10dbaab6d7e9622696

  • SHA256

    568457a3f7f57435846704179136e37112f51ef842c3c5c5dc50126ef4f662a2

  • SHA512

    c4eadd07c58aa50fe9656c1259e218ba430e7f2f6b6a84280b4f2122e70c40481c4f7346119f50e0028f8ee4f6a5484108d4cc35e80a0ab1f34da66edb38d4a1

  • SSDEEP

    12288:jvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+D:LbLgddQhfdmMSirYbcMNgef0

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      220725-dddnnabfh8

    • Size

      5.0MB

    • MD5

      1af38678dc693d8653223ae4856fd2a4

    • SHA1

      fa2dd12ab5ec307438b6fd10dbaab6d7e9622696

    • SHA256

      568457a3f7f57435846704179136e37112f51ef842c3c5c5dc50126ef4f662a2

    • SHA512

      c4eadd07c58aa50fe9656c1259e218ba430e7f2f6b6a84280b4f2122e70c40481c4f7346119f50e0028f8ee4f6a5484108d4cc35e80a0ab1f34da66edb38d4a1

    • SSDEEP

      12288:jvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+D:LbLgddQhfdmMSirYbcMNgef0

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3199) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks