Overview

overview

10

Static

static

3

f3178ae77d...9e.dll

windows7-x64

10

f3178ae77d...9e.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3178ae77df457f34b2b3a5e9f50bd9e.dll

  • Size

    5.0MB

  • Sample

    250114-1wmqlstjhp

  • MD5

    f3178ae77df457f34b2b3a5e9f50bd9e

  • SHA1

    af036d1febda4cb07ae8efe3961decaab50bea45

  • SHA256

    e033904d3cd18d9934335e78694a9c48f8cca7f1447479fe40f5e6ac8d55af25

  • SHA512

    133cbd4de24792b231b459f7b0e63bd55bed662c1ecc3a553a7b23858fa201197c40c6adf6a38bda8673dfebf066100e086b9a27d1f9be309cf742dd3a95effa

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdPF58E9L:SnAQqMSPbcBVQej/1I/8E9L

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      f3178ae77df457f34b2b3a5e9f50bd9e.dll

    • Size

      5.0MB

    • MD5

      f3178ae77df457f34b2b3a5e9f50bd9e

    • SHA1

      af036d1febda4cb07ae8efe3961decaab50bea45

    • SHA256

      e033904d3cd18d9934335e78694a9c48f8cca7f1447479fe40f5e6ac8d55af25

    • SHA512

      133cbd4de24792b231b459f7b0e63bd55bed662c1ecc3a553a7b23858fa201197c40c6adf6a38bda8673dfebf066100e086b9a27d1f9be309cf742dd3a95effa

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdPF58E9L:SnAQqMSPbcBVQej/1I/8E9L

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3178) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks