Overview

overview

10

Static

static

3

f26e3b32f4...a9.dll

windows7-x64

10

f26e3b32f4...a9.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f26e3b32f48b724f1fc9473823af68a9.dll

  • Size

    5.0MB

  • Sample

    250115-tf7mhsxmfs

  • MD5

    f26e3b32f48b724f1fc9473823af68a9

  • SHA1

    43cfbc4f8a8cd1ea6416c4b1e3d163fd8d8bb1b1

  • SHA256

    6f84d2b8719b64bc655d9f8b94b9c72500f3bd088838c223b4678d690cec2a49

  • SHA512

    2d86677ee4954634021d43fbf56dc9bca1057434d4d7ac1f1e5ef0872c7d5cc1dc3ceeddba4c2f4429c5417117a8f25cac1615533a53ac66d3bf57089770ef40

  • SSDEEP

    98304:nfPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:nfPe1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      f26e3b32f48b724f1fc9473823af68a9.dll

    • Size

      5.0MB

    • MD5

      f26e3b32f48b724f1fc9473823af68a9

    • SHA1

      43cfbc4f8a8cd1ea6416c4b1e3d163fd8d8bb1b1

    • SHA256

      6f84d2b8719b64bc655d9f8b94b9c72500f3bd088838c223b4678d690cec2a49

    • SHA512

      2d86677ee4954634021d43fbf56dc9bca1057434d4d7ac1f1e5ef0872c7d5cc1dc3ceeddba4c2f4429c5417117a8f25cac1615533a53ac66d3bf57089770ef40

    • SSDEEP

      98304:nfPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:nfPe1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3126) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks