General

  • Target

    adc924dbf5e09a5dac1e2665c6f18ce2ecc1a102fe66f6797b07c93e625cbeda

  • Size

    5.0MB

  • Sample

    240925-lxgtessbjf

  • MD5

    5de0d1d5732356b3389c88d2b6f7f355

  • SHA1

    14dd707a7823247319d638bfacef5a0f5ebfe2db

  • SHA256

    adc924dbf5e09a5dac1e2665c6f18ce2ecc1a102fe66f6797b07c93e625cbeda

  • SHA512

    5266a1ee329509c4ec5bb4cb65d6faf0b81e934e589cc89d6ed7579340cbe0b4e63a3284c5f46a21f21e3c2a65d1a3bfd902e91aa5f7ed5c2e1cc2175a714207

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9ib2H:yDqPe1Cxcxk3ZAEUa4iH

Malware Config

Targets

    • Target

      adc924dbf5e09a5dac1e2665c6f18ce2ecc1a102fe66f6797b07c93e625cbeda

    • Size

      5.0MB

    • MD5

      5de0d1d5732356b3389c88d2b6f7f355

    • SHA1

      14dd707a7823247319d638bfacef5a0f5ebfe2db

    • SHA256

      adc924dbf5e09a5dac1e2665c6f18ce2ecc1a102fe66f6797b07c93e625cbeda

    • SHA512

      5266a1ee329509c4ec5bb4cb65d6faf0b81e934e589cc89d6ed7579340cbe0b4e63a3284c5f46a21f21e3c2a65d1a3bfd902e91aa5f7ed5c2e1cc2175a714207

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9ib2H:yDqPe1Cxcxk3ZAEUa4iH

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3238) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks