Overview

overview

10

Static

static

3

dcbd3a53b0...57.dll

windows7-x64

10

dcbd3a53b0...57.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dcbd3a53b07724b50a4a10f75d73be3ad7d427046486f35ceec3aff041a87657.dll

  • Size

    5.0MB

  • Sample

    250116-d5vq9a1mgj

  • MD5

    068b5cf6bfdd3adb07561b32450d49a2

  • SHA1

    316640df0e3494acdf6fd97f9696d91b8bb7fd51

  • SHA256

    dcbd3a53b07724b50a4a10f75d73be3ad7d427046486f35ceec3aff041a87657

  • SHA512

    251fc96701693cc753a623600e3c3c8e1f6925739ed530f6edb0fc22882f8086f59004537c50078f036c2a310763b9c8b7ba89e18ef226ff18bf40a77c14348c

  • SSDEEP

    49152:RnHeMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:1HePoBhz1aRxcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      dcbd3a53b07724b50a4a10f75d73be3ad7d427046486f35ceec3aff041a87657.dll

    • Size

      5.0MB

    • MD5

      068b5cf6bfdd3adb07561b32450d49a2

    • SHA1

      316640df0e3494acdf6fd97f9696d91b8bb7fd51

    • SHA256

      dcbd3a53b07724b50a4a10f75d73be3ad7d427046486f35ceec3aff041a87657

    • SHA512

      251fc96701693cc753a623600e3c3c8e1f6925739ed530f6edb0fc22882f8086f59004537c50078f036c2a310763b9c8b7ba89e18ef226ff18bf40a77c14348c

    • SSDEEP

      49152:RnHeMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:1HePoBhz1aRxcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3082) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks