Overview

overview

10

Static

static

3

2024-01-09...ry.exe

windows7-x64

10

2024-01-09...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-09_360aacac15d5aeebcac4aa69dd2f6b44_wannacry

  • Size

    3.6MB

  • Sample

    240110-ght3zsgac2

  • MD5

    360aacac15d5aeebcac4aa69dd2f6b44

  • SHA1

    58e8e26e6bde8bf9b9c65d2c3cb9a4503da169fd

  • SHA256

    82620547e3f9c87be8ae8ac905f24af83bf54a70c635e6fe08b7c05048351033

  • SHA512

    20b3961c624529cb3c10f94f2f8e3383fa66088d34a67534ac176bfc4917804da7eb31f1709e1d2cfa34663913ee3f2783415ff5c3fdbe3ac735dc9bb4021e7c

  • SSDEEP

    49152:VnjQqMSPbcBBQej/1INRx+TSqTdX1HkQo6SAARdhNREroVe:Z8qPoB1z1aRxcSUDk36SAEdhFe

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-01-09_360aacac15d5aeebcac4aa69dd2f6b44_wannacry

    • Size

      3.6MB

    • MD5

      360aacac15d5aeebcac4aa69dd2f6b44

    • SHA1

      58e8e26e6bde8bf9b9c65d2c3cb9a4503da169fd

    • SHA256

      82620547e3f9c87be8ae8ac905f24af83bf54a70c635e6fe08b7c05048351033

    • SHA512

      20b3961c624529cb3c10f94f2f8e3383fa66088d34a67534ac176bfc4917804da7eb31f1709e1d2cfa34663913ee3f2783415ff5c3fdbe3ac735dc9bb4021e7c

    • SSDEEP

      49152:VnjQqMSPbcBBQej/1INRx+TSqTdX1HkQo6SAARdhNREroVe:Z8qPoB1z1aRxcSUDk36SAEdhFe

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3068) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks