Resubmissions

02-12-2024 09:20

241202-lasbmsvlaq 10

01-12-2024 23:21

241201-3b9ezsxkex 10

General

  • Target

    86cded2cc474e1f32dac83ca142bc440daa0a7484213589b696bb1681795a738N.exe

  • Size

    5.0MB

  • Sample

    241201-3b9ezsxkex

  • MD5

    3cbbc2d6ce90308b889a3fa506a98880

  • SHA1

    1400cdbf4f4b8fae82768479a7bdd39a7df8bf91

  • SHA256

    86cded2cc474e1f32dac83ca142bc440daa0a7484213589b696bb1681795a738

  • SHA512

    8fb316328a4da1cc8824b661a9f8ae317dfcddfa132398544c3e2ce23af611b5a0ebcb596d8fe8f56eaf641621ad2299cd7405b1004965709ac257d310abbea1

  • SSDEEP

    24576:JbLgdelLgiHIIBA7Od057/hZWI86X6LBhiLeTLQD2ou:JnjNgmDQTujbwEK

Malware Config

Targets

    • Target

      86cded2cc474e1f32dac83ca142bc440daa0a7484213589b696bb1681795a738N.exe

    • Size

      5.0MB

    • MD5

      3cbbc2d6ce90308b889a3fa506a98880

    • SHA1

      1400cdbf4f4b8fae82768479a7bdd39a7df8bf91

    • SHA256

      86cded2cc474e1f32dac83ca142bc440daa0a7484213589b696bb1681795a738

    • SHA512

      8fb316328a4da1cc8824b661a9f8ae317dfcddfa132398544c3e2ce23af611b5a0ebcb596d8fe8f56eaf641621ad2299cd7405b1004965709ac257d310abbea1

    • SSDEEP

      24576:JbLgdelLgiHIIBA7Od057/hZWI86X6LBhiLeTLQD2ou:JnjNgmDQTujbwEK

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Wannacry family

    • Contacts a large (2508) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks