Overview

overview

10

Static

static

3

2023-12-09...ry.exe

windows7-x64

10

2023-12-09...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2023-12-09_217a8e5bec49e904eed81bf78b593d61_wannacry

  • Size

    3.6MB

  • Sample

    231210-q3vdxseadj

  • MD5

    217a8e5bec49e904eed81bf78b593d61

  • SHA1

    3e2606a50cb4dfaf779bd75e604fe156a8ec86d3

  • SHA256

    0ed0758c4814ed3ce954e407fe7ae32e5b200ddef0b598bbd683bacf9469b947

  • SHA512

    8b937b680c46af60b69caf4d654004c7fa835bd8048463261bd75e057d69c73bb5f6b5403a776be39f1b596f4d3ec6fe4bf0b90c70d856e04842ef41540ce123

  • SSDEEP

    49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQFA:Z8qPoBhz1aRxcSUDk8

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2023-12-09_217a8e5bec49e904eed81bf78b593d61_wannacry

    • Size

      3.6MB

    • MD5

      217a8e5bec49e904eed81bf78b593d61

    • SHA1

      3e2606a50cb4dfaf779bd75e604fe156a8ec86d3

    • SHA256

      0ed0758c4814ed3ce954e407fe7ae32e5b200ddef0b598bbd683bacf9469b947

    • SHA512

      8b937b680c46af60b69caf4d654004c7fa835bd8048463261bd75e057d69c73bb5f6b5403a776be39f1b596f4d3ec6fe4bf0b90c70d856e04842ef41540ce123

    • SSDEEP

      49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQFA:Z8qPoBhz1aRxcSUDk8

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3320) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks