General

  • Target

    ab30576101a7677a2e946d8000b13fa92e99a42cc63e750457495eada8934464

  • Size

    5.0MB

  • Sample

    240721-flbkdavbpd

  • MD5

    9aae6412b2dfc9ed503e6c7123e95579

  • SHA1

    0582e125d46b2f1170aa4a3ee2a7d9117ca06b8a

  • SHA256

    ab30576101a7677a2e946d8000b13fa92e99a42cc63e750457495eada8934464

  • SHA512

    4fc0d530ba7df7898bdeadc28ad9f8dd80d809515868dd5e417190b3f23ef6a7c3f89e73010781c95a57e29de4f630c7b95ebff6eea4023afdb41ac4cdd103a9

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA

Malware Config

Targets

    • Target

      ab30576101a7677a2e946d8000b13fa92e99a42cc63e750457495eada8934464

    • Size

      5.0MB

    • MD5

      9aae6412b2dfc9ed503e6c7123e95579

    • SHA1

      0582e125d46b2f1170aa4a3ee2a7d9117ca06b8a

    • SHA256

      ab30576101a7677a2e946d8000b13fa92e99a42cc63e750457495eada8934464

    • SHA512

      4fc0d530ba7df7898bdeadc28ad9f8dd80d809515868dd5e417190b3f23ef6a7c3f89e73010781c95a57e29de4f630c7b95ebff6eea4023afdb41ac4cdd103a9

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3301) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.