8052f841d6476459bd7a34171f453c64a39b9af0cf0698896282fd3ac2b86bf2

Classification: Malicious

8052f841d6476459bd7a34171f453c64a39b9af0cf0698896282fd3ac2b86bf2 is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02.

Detection summary

  • 104 antivirus detections (86% detection ratio)
  • 4 IDS alerts
  • 3 processes observed
  • 32 contacted hosts
  • 1 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-02 15:45:07 2026-09-02 15:45:07 malicious-activity
Ransom.WannaCrypt Hybrid-Analysis 2018-05-06 09:00:17 2018-05-06 09:00:17

Tags

sinkhole wanacrypt0r wannacry wcry

Sample information

Filenames
8052f841d6476459bd7a34171f453c64a39b9af0cf0698896282fd3ac2b86bf2, a6324d10c1f5dd8b725500b848443b0f
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Size
5267459 bytes
MD5
a6324d10c1f5dd8b725500b848443b0f
SHA-1
a269c2753883d86431477722eab31de7322cfa6a
SHA-256
8052f841d6476459bd7a34171f453c64a39b9af0cf0698896282fd3ac2b86bf2
SHA-512
9d1d60abd9bbd6f5ad2f953f77a724d54160f0fdc059f2952a8e23440d55d35d9b91bd795bc581e2daaf047c94c445891fdd9308b1feca6f67fcf12c4518c10d
First indexed
2018-05-06 09:00:17
Last updated
2026-09-02 15:45:07

Antivirus detections

EngineDetection
MicroWorld-eScanTrojan.GenericKD.12015782
nProtectRansom/W32.WannaCry.5267459
CAT-QuickHealRansom.WannaCrypt.S1670344
ALYacTrojan.GenericKD.12015782
CylanceUnsafe
ZillyaExploit.CVE.Win32.1764
TheHackerTrojan/Exploit.CVE-2017-0147.a
K7GWExploit ( 0050d7a31 )
K7AntiVirusExploit ( 0050d7a31 )
ArcabitTrojan.Generic.DB758A6
Invinceaheuristic
BaiduWin32.Worm.Rbot.a
CyrenW32/WannaCrypt.A.gen!Eldorado
SymantecRansom.Wannacry
TrendMicro-HouseCallRansom_WCRY.SMALYM
AvastWin32:WanaCry-A [Trj]
ClamAVWin.Ransomware.WannaCry-6313787-0
KasperskyTrojan-Ransom.Win32.Wanna.m
BitDefenderTrojan.GenericKD.12015782
NANO-AntivirusTrojan.Win32.Wanna.epxkni
Paloaltogeneric.ml
AegisLabTroj.Ransom.W32.Wanna.toP0
TencentTrojan-Ransom.Win32.Wanna.m
Ad-AwareTrojan.GenericKD.12015782
EmsisoftTrojan.GenericKD.12015782 (B)
ComodoTrojWare.Win32.Ransom.WannaCry.AB
F-SecureTrojan.GenericKD.12015782
DrWebTrojan.Encoder.11432
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_WCRY.SMALYM
McAfee-GW-EditionBehavesLike.Win32.RansomWannaCry.tm
SophosMal/Wanna-A
SentinelOnestatic engine - malicious
F-ProtW32/S-2b52222d!Eldorado
JiangminTrojan.Wanna.k
WebrootW32.Ransom.Wannacrypt
AviraTR/Ransom.Gen
Antiy-AVLTrojan[Ransom]/Win32.Wanna
MicrosoftRansom:Win32/WannaCrypt.A!rsm
Endgamemalicious (high confidence)
ViRobotTrojan.Win32.WannaCry.5267459
ZoneAlarmTrojan-Ransom.Win32.Wanna.m
GDataWin32.Exploit.CVE-2017-0147.A
AhnLab-V3Trojan/Win32.WannaCryptor.R200894
McAfeeRansom-WannaCry!A6324D10C1F5
AVwareTrojan.Win32.Generic!BT
MAXmalware (ai score=100)
VBA32Hoax.Wanna
MalwarebytesRansom.WannaCrypt
ESET-NOD32Win32/Exploit.CVE-2017-0147.A
RisingExploit.EternalBlue!1.AAED (CLASSIC)
YandexExploit.CVE-2017-0147!
IkarusTrojan.Win32.Exploit
eGambitTrojan.Generic
AVGWin32:WanaCry-A [Trj]
PandaTrj/GdSda.A
CrowdStrikemalicious_confidence_100% (D)
Qihoo-360Win32/Worm.WannaCrypt.W
ALYacTrojan.Agent.CZTF
APEXMalicious
AVGSf:WNCryLdr-A [Trj]
Acronissuspicious
AlibabaExploit:Win32/CVE-2017-0147.eec4934c
ArcabitTrojan.Agent.CZTF
AvastSf:WNCryLdr-A [Trj]
AviraTR/AD.WannaCry.jxpvm
BitDefenderTrojan.Agent.CZTF
BkavW32.AIDetectMalware
CTXdll.trojan.cztf
ClamAVWin.Ransomware.Wanna-9769986-0
CrowdStrikewin/malicious_confidence_100% (W)
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
Elasticmalicious (high confidence)
EmsisoftTrojan.Agent.CZTF (B)
F-SecureTrojan.TR/AD.WannaCry.jxpvm
FireEyeGeneric.mg.a6324d10c1f5dd8b
FortinetW32/WannaCryptor.H!tr.ransom
GDataWin32.Trojan-Ransom.WannaCry.K
GridinsoftRansom.Win32.WannaCrypt.ko!s1
IkarusExploit.CVE-2017-0147
K7AntiVirusTrojan ( 00557fc41 )
K7GWTrojan ( 00557fc41 )
KingsoftWin32.HeurC.KVM005.a
LionicTrojan.Win32.Wanna.tpxd
MalwarebytesCVE20170147.Trojan.Exploit.DDS
MaxSecureTrojan-Ransom.Win32.Wanna.m
McAfeeDReal Protect-LS!A6324D10C1F5
MicroWorld-eScanTrojan.Agent.CZTF
MicrosoftRansom:Win32/CVE!pz
PandaTrj/CI.A
SangforRansom.Win32.Save.WannaCry
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.RansomWannaCry.tm
TACHYONRansom/W32.WannaCry.5267459
TencentTrojan-Ransom.Win32.Wanna.ha
Trapminemalicious.high.ml.score
VIPRETrojan.Agent.CZTF
VaristW32/WannaCrypt.A.gen!Eldorado
VirITTrojan.Win32.Encoder.QXS
XcitiumTrojWare.Win32.Ransom.WannaCry.AB@75ge5e
alibabacloudExp:Win/CVE.2017.0147
huorongTrojanDropper/Agent.mh
tehtrisGeneric.Malware

Network contacts

104.17.37.137 128.192.132.27 110.24.244.45 120.113.0.90 39.215.56.26 74.162.3.146 200.48.244.59 223.22.157.58 173.45.200.128 59.139.204.77 40.251.121.61 42.25.112.225 97.34.75.63 36.65.216.13 114.228.171.166 8.222.101.165 72.126.163.204 89.199.94.67 158.118.134.191 43.193.227.244 174.3.56.237 156.92.149.125 128.15.113.15 173.53.156.105 202.248.194.240 9.232.118.119 191.68.145.131 101.35.203.26 108.207.193.136 80.15.80.245 71.97.111.29 119.125.196.41

DNS requests

www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

Process list

NameCommand line
rundll32.exe"C:\a6324d10c1f5dd8b725500b848443b0f.dll",PlayGame
mssecsvc.exe
mssecsvc.exe-m security