537f0aca0b2951c929f8442d96fdcb98730a5d8d1c2f8f3676213e72e7056e33

Classification: Malicious

537f0aca0b2951c929f8442d96fdcb98730a5d8d1c2f8f3676213e72e7056e33 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.

Detection summary

  • 62 antivirus detections (89% detection ratio)
  • 1 IDS alerts
  • 4 processes observed
  • 64 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-02 16:45:07 2026-09-02 16:45:07 malicious-activity
WannaCryptor ThreatFox Abuse.ch 2022-02-10 22:43:00 2022-02-10 23:38:56

Tags

win.wannacryptor wcry wannacry wana decrypt0r ransomware wanacrypt0r

Sample information

Filenames
537f0aca0b2951c929f8442d96fdcb98730a5d8d1c2f8f3676213e72e7056e33, 6d6a622613c437addd40c1932495facf
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
5267459 bytes
MD5
6d6a622613c437addd40c1932495facf
SHA-1
9f4eea47bb99a2eb5f5f76be459b5ca9ee3d9e42
SHA-256
537f0aca0b2951c929f8442d96fdcb98730a5d8d1c2f8f3676213e72e7056e33
First indexed
2021-05-29 21:52:19
Last updated
2026-09-02 16:45:07

Antivirus detections

EngineDetection
MicroWorld-eScanTrojan.GenericKD.40267082
CMCTrojan-Ransom.Win32.Wanna!O
CAT-QuickHealRansom.WannaCrypt.S1670344
McAfeeGenericRXFL-OG!6D6A622613C4
MalwarebytesRansom.WannaCrypt
ZillyaExploit.CVE.Win32.1765
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaRansom:Win32/CVE-2017-0147.00b26c00
K7GWTrojan ( 00557fc41 )
K7AntiVirusTrojan ( 00557fc41 )
ArcabitTrojan.Generic.D2666D4A
Invinceaheuristic
BaiduWin32.Worm.Rbot.a
CyrenW32/WannaCrypt.A.gen!Eldorado
SymantecRansom.Wannacry
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Ransomware.WannaCry-6313787-0
KasperskyTrojan-Ransom.Win32.Wanna.m
BitDefenderTrojan.GenericKD.40267082
NANO-AntivirusTrojan.Win32.Wanna.epxkni
ViRobotTrojan.Win32.WannaCry.5267459
AvastSf:WNCryLdr-A [Trj]
TencentTrojan-Ransom.Win32.Wanna.m
Ad-AwareTrojan.GenericKD.40267082
EmsisoftTrojan.GenericKD.40267082 (B)
ComodoTrojWare.Win32.Ransom.WannaCry.AB@75ge5e
F-SecureTrojan.TR/Ransom.Gen
DrWebTrojan.Encoder.11432
TrendMicroRansom_WCRY.SMALYM
McAfee-GW-EditionBehavesLike.Win32.RansomWannaCry.tt
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.6d6a622613c437ad
SophosMal/Wanna-A
SentinelOneDFI - Malicious PE
F-ProtW32/S-2b52222d!Eldorado
JiangminTrojan.Wanna.k
WebrootW32.Trojan.Gen
AviraTR/Ransom.Gen
FortinetW32/WannaCryptor.H!tr.ransom
Antiy-AVLTrojan[Ransom]/Win32.Wanna
Endgamemalicious (high confidence)
MicrosoftRansom:Win32/CVE-2017-0147.A
AegisLabTrojan.Win32.Wanna.u!c
ZoneAlarmTrojan-Ransom.Win32.Wanna.m
TACHYONRansom/W32.WannaCry.5267459
AhnLab-V3Trojan/Win32.WannaCryptor.R200894
Acronissuspicious
VBA32Hoax.Wanna
ALYacTrojan.GenericKD.40267082
MAXmalware (ai score=81)
CylanceUnsafe
ESET-NOD32Win32/Exploit.CVE-2017-0147.A
TrendMicro-HouseCallRansom_WCRY.SMALYM
RisingExploit.EternalBlue!1.AAED (CLASSIC)
YandexExploit.CVE-2017-0147!
IkarusTrojan-Ransom.WannaCry
eGambitTrojan.Generic
GDataTrojan.GenericKD.40267082
AVGSf:WNCryLdr-A [Trj]
PandaTrj/Genetic.gen
Qihoo-360Win32/Worm.WannaCrypt.W

Network contacts

215.85.82.57 93.30.104.26 62.208.122.19 53.204.250.221 153.237.52.175 11.52.141.209 26.127.17.197 54.180.5.94 45.209.250.165 48.55.202.134 103.193.234.92 73.248.239.171 160.152.80.184 164.244.177.108 84.30.201.44 55.64.167.137 41.206.88.93 36.71.55.46 79.104.159.42 14.29.158.97 98.23.87.249 165.55.246.6 178.62.252.5 11.134.86.25 68.36.11.143 53.235.87.217 69.222.88.117 108.134.206.70 87.125.187.74 214.108.106.16 35.249.240.79 45.116.234.89 15.252.206.180 137.99.8.102 132.140.61.147 208.66.88.130 154.218.155.165 124.212.21.64 101.252.104.234 188.162.151.148 1.248.166.20 215.219.143.27 147.251.196.64 214.204.188.6 117.230.141.111 17.71.224.111 162.121.228.37 137.92.179.221 94.208.28.30 221.135.59.104

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\6d6a622613c437addd40c1932495facf.dll",#1
mssecsvc.exe
mssecsvc.exe-m security