Resubmissions

04-12-2024 19:33

241204-x9h3sssreq 10

04-12-2024 01:46

241204-b7agzsvpgx 10

General

  • Target

    ee9beaac9a91e545a3df9938210ed8f97f68b899bec28fbd16756f8f5d957527.exe

  • Size

    5.0MB

  • Sample

    241204-b7agzsvpgx

  • MD5

    f73f5c92ad079185008ed26e408f8781

  • SHA1

    7fa06bf2e5951d1ffc7d1d71ddc26829bbdccc0c

  • SHA256

    ee9beaac9a91e545a3df9938210ed8f97f68b899bec28fbd16756f8f5d957527

  • SHA512

    6e5977b5c380a3e058f3ee5a811a1410233e4a28111a0f7492d1a0c185bd4ef2c3fb00946dfc98c32f8004b27ffb37ffdeffa5d78a87fb7890ddafba8c3d0e55

  • SSDEEP

    24576:JbLgdelLgiHIIBA7Od057/hZWI86X6LBhiLeTLQD2ouJ:JnjNgmDQTujbwEK4

Malware Config

Targets

    • Target

      ee9beaac9a91e545a3df9938210ed8f97f68b899bec28fbd16756f8f5d957527.exe

    • Size

      5.0MB

    • MD5

      f73f5c92ad079185008ed26e408f8781

    • SHA1

      7fa06bf2e5951d1ffc7d1d71ddc26829bbdccc0c

    • SHA256

      ee9beaac9a91e545a3df9938210ed8f97f68b899bec28fbd16756f8f5d957527

    • SHA512

      6e5977b5c380a3e058f3ee5a811a1410233e4a28111a0f7492d1a0c185bd4ef2c3fb00946dfc98c32f8004b27ffb37ffdeffa5d78a87fb7890ddafba8c3d0e55

    • SSDEEP

      24576:JbLgdelLgiHIIBA7Od057/hZWI86X6LBhiLeTLQD2ouJ:JnjNgmDQTujbwEK4

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Wannacry family

    • Contacts a large (2505) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks