wannacry | 4a5e29ad3280b55b53807c9eddd353afb57a00a37abf1a820d846c42059e66d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a5e29ad3280b55b53807c9eddd353afb57a00a37abf1a820d846c42059e66d2
Size

3.4MB
Sample

221026-l1vjpafcf5
MD5

0e4c64bd0db07a8da4a577ce09ad2ce5
SHA1

8ace3f83841d5e7d4ffb28692378dea58edb3dc1
SHA256

4a5e29ad3280b55b53807c9eddd353afb57a00a37abf1a820d846c42059e66d2
SHA512

5c96a837049224e2a9b9ea7036970688385177d044655823431112ac4cecf164e116a219b1011798cb37853e9a79fdefe3ba2d05ae3f7181c2085d85d480d9e3
SSDEEP

98304:QgPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3x:QgPe1Cxcxk3ZAEUadzR8yc4gB

Score

10^/10

wannacry discovery ransomware worm

Malware Config

Targets

- Target
  
  4a5e29ad3280b55b53807c9eddd353afb57a00a37abf1a820d846c42059e66d2
- Size
  
  3.4MB
- MD5
  
  0e4c64bd0db07a8da4a577ce09ad2ce5
- SHA1
  
  8ace3f83841d5e7d4ffb28692378dea58edb3dc1
- SHA256
  
  4a5e29ad3280b55b53807c9eddd353afb57a00a37abf1a820d846c42059e66d2
- SHA512
  
  5c96a837049224e2a9b9ea7036970688385177d044655823431112ac4cecf164e116a219b1011798cb37853e9a79fdefe3ba2d05ae3f7181c2085d85d480d9e3
- SSDEEP
  
  98304:QgPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3x:QgPe1Cxcxk3ZAEUadzR8yc4gB
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Modifies file permissions
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Hidden Files and Directories

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm