Overview

overview

10

Static

static

3

91647c8fdf...1a.exe

windows7-x64

10

91647c8fdf...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91647c8fdf3bc3b25797cb367d578dd3044f76993ba8457d89876f55b5cc841a.exe

  • Size

    5.0MB

  • Sample

    241222-qvrytsznbz

  • MD5

    4bc70640a4fe437921ec5e143e7de636

  • SHA1

    069c081ae40813a2168db3853eac5aba22d54066

  • SHA256

    91647c8fdf3bc3b25797cb367d578dd3044f76993ba8457d89876f55b5cc841a

  • SHA512

    2fee817321bef778f2dd7214c386b9e66c2f151e86485e14fd522d8f00eeb5abe7111b49e84587d9184ab0d1a45d81a30071522eff77f8fe94f535986044994c

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAV:yDqPoBhz1aRxcSUDk36SAA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      91647c8fdf3bc3b25797cb367d578dd3044f76993ba8457d89876f55b5cc841a.exe

    • Size

      5.0MB

    • MD5

      4bc70640a4fe437921ec5e143e7de636

    • SHA1

      069c081ae40813a2168db3853eac5aba22d54066

    • SHA256

      91647c8fdf3bc3b25797cb367d578dd3044f76993ba8457d89876f55b5cc841a

    • SHA512

      2fee817321bef778f2dd7214c386b9e66c2f151e86485e14fd522d8f00eeb5abe7111b49e84587d9184ab0d1a45d81a30071522eff77f8fe94f535986044994c

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAV:yDqPoBhz1aRxcSUDk36SAA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3230) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks