Overview

overview

10

Static

static

3

2024-03-12...ry.exe

windows7-x64

10

2024-03-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-12_16e7cd49737471a1466978e588f2709a_wannacry

  • Size

    2.2MB

  • Sample

    240312-lqqsraff98

  • MD5

    16e7cd49737471a1466978e588f2709a

  • SHA1

    5189abb6629c0e713d6fdd2997332d94fdae2e22

  • SHA256

    fadeb23d099e1450db3a46c6d31537cc37fef9d1f12d427806e3ff8a9fbcc4ff

  • SHA512

    3f2a906649f516e11930211d01ef6419057e66afe92dd818b8c4985f942996e7bf9c1ee86633443a35c7b9ad8808d9929435b13aca895131009324ebcae1ede0

  • SSDEEP

    49152:QnjQqMSPbcBVQej/1INRB+TSqTdX1HkQo6SAARdhnvn:Q8qPoBhz1aRBcSUDk36SAEdhvn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-03-12_16e7cd49737471a1466978e588f2709a_wannacry

    • Size

      2.2MB

    • MD5

      16e7cd49737471a1466978e588f2709a

    • SHA1

      5189abb6629c0e713d6fdd2997332d94fdae2e22

    • SHA256

      fadeb23d099e1450db3a46c6d31537cc37fef9d1f12d427806e3ff8a9fbcc4ff

    • SHA512

      3f2a906649f516e11930211d01ef6419057e66afe92dd818b8c4985f942996e7bf9c1ee86633443a35c7b9ad8808d9929435b13aca895131009324ebcae1ede0

    • SSDEEP

      49152:QnjQqMSPbcBVQej/1INRB+TSqTdX1HkQo6SAARdhnvn:Q8qPoBhz1aRBcSUDk36SAEdhvn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3105) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks