Overview

overview

10

Static

static

3

64416e6024...a6.dll

windows7-x64

10

64416e6024...a6.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64416e602428cc5a299a015a0fa9f1a6.dll

  • Size

    5.0MB

  • Sample

    250114-yqerpsznfj

  • MD5

    64416e602428cc5a299a015a0fa9f1a6

  • SHA1

    f8b6a8cc3405b348147b5ac432ceef11d5e84ae4

  • SHA256

    2f533e5c3c70b96ca7155942b51a20cde0abe2f955d67fa6b436a8dda664f746

  • SHA512

    03fddfe4546646a880e387a71a662b1f406073a03e67402febadd8836b2c7ec962183a59f2e6700edca44d6fc8ca975e313ffd39bc989a7aa72b7bd5e777a771

  • SSDEEP

    98304:BDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:BDqPe1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      64416e602428cc5a299a015a0fa9f1a6.dll

    • Size

      5.0MB

    • MD5

      64416e602428cc5a299a015a0fa9f1a6

    • SHA1

      f8b6a8cc3405b348147b5ac432ceef11d5e84ae4

    • SHA256

      2f533e5c3c70b96ca7155942b51a20cde0abe2f955d67fa6b436a8dda664f746

    • SHA512

      03fddfe4546646a880e387a71a662b1f406073a03e67402febadd8836b2c7ec962183a59f2e6700edca44d6fc8ca975e313ffd39bc989a7aa72b7bd5e777a771

    • SSDEEP

      98304:BDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:BDqPe1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3110) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks