wannacry | b1fa28501a812b172007de6223c0ce8f46cd041b1883bdbd34f3e6bb0bcb991e | Triage

Resubmissions

01-06-2023 08:14

230601-j5g32sdf9x 6

01-06-2023 07:53

230601-jrfytsdb83 10

Sharing

General

Target

Skript-2.7.0-beta2.jar
Size

2.8MB
Sample

230601-jrfytsdb83
MD5

6a2fd356116b6a0ffbc563d329c714b6
SHA1

29fd31b7864b70263155ccfdd1fa243f599db295
SHA256

b1fa28501a812b172007de6223c0ce8f46cd041b1883bdbd34f3e6bb0bcb991e
SHA512

ea81a536ffb035cbf567aa9394292a8f555ef762b667fccd60f22983aeff69717a6de661cc65e453bdf34b7f88f75d3d59e1fb027330e23692af6f757bfd9ad3
SSDEEP

49152:goBLzJgHZijLTPN8zoSPBNzKwMC9lhbF2JeBNfZrWgqvBRtnDUzWRQhPxx:gWvJKcjqzhPfzKkzfZOX1OWuhPxx

Score

10^/10

wannacry ransomware worm

Malware Config

Targets

- Target
  
  Skript-2.7.0-beta2.jar
- Size
  
  2.8MB
- MD5
  
  6a2fd356116b6a0ffbc563d329c714b6
- SHA1
  
  29fd31b7864b70263155ccfdd1fa243f599db295
- SHA256
  
  b1fa28501a812b172007de6223c0ce8f46cd041b1883bdbd34f3e6bb0bcb991e
- SHA512
  
  ea81a536ffb035cbf567aa9394292a8f555ef762b667fccd60f22983aeff69717a6de661cc65e453bdf34b7f88f75d3d59e1fb027330e23692af6f757bfd9ad3
- SSDEEP
  
  49152:goBLzJgHZijLTPN8zoSPBNzKwMC9lhbF2JeBNfZrWgqvBRtnDUzWRQhPxx:gWvJKcjqzhPfzKkzfZOX1OWuhPxx
Score

10^/10

wannacry ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Downloads MZ/PE file
- Executes dropped EXE
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Defacement

Tasks

static1

behavioral1

behavioral2

wannacryransomwareworm