Overview

overview

10

Static

static

3

64d9518712...cs.dll

windows7-x64

10

64d9518712...cs.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64d95187128d914965de0c8d049cbb22f5b3cda23183e94c6d82e3ed40cda817_NeikiAnalytics.exe

  • Size

    5.0MB

  • Sample

    240620-p7g4qaycqd

  • MD5

    176d70629d399ac693f7b03451f262f0

  • SHA1

    d134d4497b644f52fe725d8c12cb31f99af79aa0

  • SHA256

    64d95187128d914965de0c8d049cbb22f5b3cda23183e94c6d82e3ed40cda817

  • SHA512

    d77aca892e9c79fad97f702c3dd7e7fd445b4a7672e7abaf3388911faaa5cf65b10f731473247863a202cdfc6605849be020e5412c65caa8f089ed832fb6efde

  • SSDEEP

    24576:RbLgurgQhfdmMSirYbcMNgef0QeQjGIkQg6eX6SASkjTiif0Xc/OXlc3:RnsQqMSPbcBVQejIkQo6SArf0XdX63

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      64d95187128d914965de0c8d049cbb22f5b3cda23183e94c6d82e3ed40cda817_NeikiAnalytics.exe

    • Size

      5.0MB

    • MD5

      176d70629d399ac693f7b03451f262f0

    • SHA1

      d134d4497b644f52fe725d8c12cb31f99af79aa0

    • SHA256

      64d95187128d914965de0c8d049cbb22f5b3cda23183e94c6d82e3ed40cda817

    • SHA512

      d77aca892e9c79fad97f702c3dd7e7fd445b4a7672e7abaf3388911faaa5cf65b10f731473247863a202cdfc6605849be020e5412c65caa8f089ed832fb6efde

    • SSDEEP

      24576:RbLgurgQhfdmMSirYbcMNgef0QeQjGIkQg6eX6SASkjTiif0Xc/OXlc3:RnsQqMSPbcBVQejIkQo6SArf0XdX63

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3300) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks