Wannacry

WannaCry is a ransomware cryptoworm.

suricata: ET MALWARE Known Sinkhole Response Kryptos Logic

suricata: ET MALWARE Known Sinkhole Response Kryptos Logic

suricata: ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1

suricata: ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1

Contacts a large (12096) amount of remote hosts

This may indicate a network scan to discover remotely running services.

Creates a large amount of network flows

This may indicate a network scan to discover remotely running services.

Executes dropped EXE