General

  • Target

    e9b9e9ce0025b73d95e9ce128df0ce90N

  • Size

    2.2MB

  • Sample

    240913-htbapazfpn

  • MD5

    e9b9e9ce0025b73d95e9ce128df0ce90

  • SHA1

    fde39b7a8c4c9ef172a2afbd43e436a68264e9ca

  • SHA256

    843f44e4201bdc04fed6ecd1a9a69f21893ac2af4ed5bb09a5b6c4e3748168f1

  • SHA512

    0b62b6ea6d02e5b71ccff35a7ba77fab91338f0e87bc15f696a5f19e79d66ffb67d4f2d31dc9e44d270fb39f955618960a31cd909769feb5c2672558c64da3a7

  • SSDEEP

    24576:QbLguripdmMSirYbcMNgef0QeQjGmdmvn:QnvMSPbcBVQejBvn

Malware Config

Targets

    • Target

      e9b9e9ce0025b73d95e9ce128df0ce90N

    • Size

      2.2MB

    • MD5

      e9b9e9ce0025b73d95e9ce128df0ce90

    • SHA1

      fde39b7a8c4c9ef172a2afbd43e436a68264e9ca

    • SHA256

      843f44e4201bdc04fed6ecd1a9a69f21893ac2af4ed5bb09a5b6c4e3748168f1

    • SHA512

      0b62b6ea6d02e5b71ccff35a7ba77fab91338f0e87bc15f696a5f19e79d66ffb67d4f2d31dc9e44d270fb39f955618960a31cd909769feb5c2672558c64da3a7

    • SSDEEP

      24576:QbLguripdmMSirYbcMNgef0QeQjGmdmvn:QnvMSPbcBVQejBvn

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (1324) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks