Overview

overview

10

Static

static

3

996c2b2ca3...1).dll

windows7-x64

10

996c2b2ca3...1).dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    996c2b2ca30180129c69352a3a3515e4 (1)

  • Size

    5.0MB

  • Sample

    240325-g8zq6ada9x

  • MD5

    996c2b2ca30180129c69352a3a3515e4

  • SHA1

    6d788a5a77719ef3157c409108909da2456bf996

  • SHA256

    df6d5b29a97647bca44e2306069f7675ef992f591c8c761af99bbdc17cfa7692

  • SHA512

    da2acf9fd0553b473802b6dd8cf35a0ac4e734f0a790f9c260db06f46f84ff452bd888297f662540bf60a895a3f196368d3e24d13dd9e0d4ca9e83d3cc1076de

  • SSDEEP

    98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:TDqPe1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      996c2b2ca30180129c69352a3a3515e4 (1)

    • Size

      5.0MB

    • MD5

      996c2b2ca30180129c69352a3a3515e4

    • SHA1

      6d788a5a77719ef3157c409108909da2456bf996

    • SHA256

      df6d5b29a97647bca44e2306069f7675ef992f591c8c761af99bbdc17cfa7692

    • SHA512

      da2acf9fd0553b473802b6dd8cf35a0ac4e734f0a790f9c260db06f46f84ff452bd888297f662540bf60a895a3f196368d3e24d13dd9e0d4ca9e83d3cc1076de

    • SSDEEP

      98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:TDqPe1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3264) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks