wannacry | e669f2d391bb418784e76076042728a4ab2d57ecbf09fc1adc391785a990a1e5 | Triage

Sharing

General

Target

e669f2d391bb418784e76076042728a4ab2d57ecbf09fc1adc391785a990a1e5
Size

70KB
Sample

220305-3tchzaheh7
MD5

1ce246828d587930e292cca250cc248d
SHA1

6732ea6943383948633be2c8dec81452624a9cc1
SHA256

e669f2d391bb418784e76076042728a4ab2d57ecbf09fc1adc391785a990a1e5
SHA512

111746db30f166b34b9f98bc7fef273948d2cdc23830e23fedbc243b51c9a1e8b077ad042e3c8a16f8a1b7a444a1aad796c9271f5b743f6d4d32871c7e9d89ff

Score

10^/10

wannacry ransomware worm

Malware Config

Targets

- Target
  
  e669f2d391bb418784e76076042728a4ab2d57ecbf09fc1adc391785a990a1e5
- Size
  
  70KB
- MD5
  
  1ce246828d587930e292cca250cc248d
- SHA1
  
  6732ea6943383948633be2c8dec81452624a9cc1
- SHA256
  
  e669f2d391bb418784e76076042728a4ab2d57ecbf09fc1adc391785a990a1e5
- SHA512
  
  111746db30f166b34b9f98bc7fef273948d2cdc23830e23fedbc243b51c9a1e8b077ad042e3c8a16f8a1b7a444a1aad796c9271f5b743f6d4d32871c7e9d89ff
Score

10^/10

wannacry ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

wannacryransomwareworm

behavioral2

wannacryransomwareworm