Overview

overview

10

Static

static

3

269d6a38de...d2.dll

windows7-x64

10

269d6a38de...d2.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    269d6a38de8ff33cb033509ef49dd7d2.dll

  • Size

    5.0MB

  • Sample

    250115-wnk5la1rhl

  • MD5

    269d6a38de8ff33cb033509ef49dd7d2

  • SHA1

    f5c2049a17b5c3b6d3ba93f06a61ad8ae264fb60

  • SHA256

    62e9391e7aada2e5c0ee36f418c78da93bafc6db05fc05ca8a7dce824ced2e62

  • SHA512

    857270c1bfd4a770b41518275c57cea2f6444b09e63b7bfd557d8ecb8ef29e358078975ef24ede10771ac0510a09146b7fa51a2ef65ce74d51a72ab3787c228c

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWas593R8yAVp2H:+DqPe1Cxcxk3ZAEUaszR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      269d6a38de8ff33cb033509ef49dd7d2.dll

    • Size

      5.0MB

    • MD5

      269d6a38de8ff33cb033509ef49dd7d2

    • SHA1

      f5c2049a17b5c3b6d3ba93f06a61ad8ae264fb60

    • SHA256

      62e9391e7aada2e5c0ee36f418c78da93bafc6db05fc05ca8a7dce824ced2e62

    • SHA512

      857270c1bfd4a770b41518275c57cea2f6444b09e63b7bfd557d8ecb8ef29e358078975ef24ede10771ac0510a09146b7fa51a2ef65ce74d51a72ab3787c228c

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWas593R8yAVp2H:+DqPe1Cxcxk3ZAEUaszR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3310) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks