Overview

overview

10

Static

static

3

9cccad9472...b9.dll

windows7-x64

10

9cccad9472...b9.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9cccad94729abbbd27c8071de58402b9.dll

  • Size

    5.0MB

  • Sample

    250115-qdmmsatlbv

  • MD5

    9cccad94729abbbd27c8071de58402b9

  • SHA1

    0bbd3b74d2fae3564266b63fc251860e48bd77bd

  • SHA256

    fc7b58c22d9f27207af9c640c751dcab61fd90621ed9df95591d78b2758073f5

  • SHA512

    2209d4267c07de089fef98bcf4d6d5ff82cb5621e74da5650e620ffb5b68ae5148c92d355ce9accdb951d1f4a831ee08def663d43916de94e39284eadc24637f

  • SSDEEP

    98304:+Dpz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:+DB1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      9cccad94729abbbd27c8071de58402b9.dll

    • Size

      5.0MB

    • MD5

      9cccad94729abbbd27c8071de58402b9

    • SHA1

      0bbd3b74d2fae3564266b63fc251860e48bd77bd

    • SHA256

      fc7b58c22d9f27207af9c640c751dcab61fd90621ed9df95591d78b2758073f5

    • SHA512

      2209d4267c07de089fef98bcf4d6d5ff82cb5621e74da5650e620ffb5b68ae5148c92d355ce9accdb951d1f4a831ee08def663d43916de94e39284eadc24637f

    • SSDEEP

      98304:+Dpz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:+DB1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3218) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks