Overview

overview

10

Static

static

3

2024-02-12...ry.exe

windows7-x64

10

2024-02-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_4590523a8c2c32ee640401c73c1696c6_wannacry

  • Size

    3.6MB

  • Sample

    240212-q2zl9afa8w

  • MD5

    4590523a8c2c32ee640401c73c1696c6

  • SHA1

    6515d22dd5b2688bd027de9090a7b906cbf5f097

  • SHA256

    b94e2b8210c0894196a4675eb128abdc62b8eed3ef5ba0e042a2132431dfcc1d

  • SHA512

    b9359bf255e59d59de69db1ab357a0f3989a65c10bfa17c9f6e92ee5dc25047537df7856776ca3e55e1d24fb46eeff1d0c02b24062cb315066657085b7aa510f

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWal3R8y:yDqPe1Cxcxk3ZAEUaFR8y

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-02-12_4590523a8c2c32ee640401c73c1696c6_wannacry

    • Size

      3.6MB

    • MD5

      4590523a8c2c32ee640401c73c1696c6

    • SHA1

      6515d22dd5b2688bd027de9090a7b906cbf5f097

    • SHA256

      b94e2b8210c0894196a4675eb128abdc62b8eed3ef5ba0e042a2132431dfcc1d

    • SHA512

      b9359bf255e59d59de69db1ab357a0f3989a65c10bfa17c9f6e92ee5dc25047537df7856776ca3e55e1d24fb46eeff1d0c02b24062cb315066657085b7aa510f

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWal3R8y:yDqPe1Cxcxk3ZAEUaFR8y

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3160) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks