Overview

overview

10

Static

static

3

2024-03-14...ry.exe

windows7-x64

10

2024-03-14...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-14_666042fa9310744f696d45e1ec27e758_wannacry

  • Size

    5.0MB

  • Sample

    240314-kjh9nafb2t

  • MD5

    666042fa9310744f696d45e1ec27e758

  • SHA1

    ec9a1dd3f02af2588ff19ea7803c79015cdefc9d

  • SHA256

    1dd5169acfb40a0420cf24cfa2857a06127a7da67a5e8b15d7cb4cb6683fcfec

  • SHA512

    5dec94cfd1434d89ae90ac7ac9b6096f5429f872424736f4e57d9943f2c86d6c88e2290b912b1144db29e6ac40992a03cfdc204f00d2d9fc18d1dd732cddff0d

  • SSDEEP

    98304:h2qPoBhz1aRxcSUDk36SAEdhvxWa9PgWeS2sH:h2qPe1Cxcxk3ZAEUadgWv2sH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-03-14_666042fa9310744f696d45e1ec27e758_wannacry

    • Size

      5.0MB

    • MD5

      666042fa9310744f696d45e1ec27e758

    • SHA1

      ec9a1dd3f02af2588ff19ea7803c79015cdefc9d

    • SHA256

      1dd5169acfb40a0420cf24cfa2857a06127a7da67a5e8b15d7cb4cb6683fcfec

    • SHA512

      5dec94cfd1434d89ae90ac7ac9b6096f5429f872424736f4e57d9943f2c86d6c88e2290b912b1144db29e6ac40992a03cfdc204f00d2d9fc18d1dd732cddff0d

    • SSDEEP

      98304:h2qPoBhz1aRxcSUDk36SAEdhvxWa9PgWeS2sH:h2qPe1Cxcxk3ZAEUadgWv2sH

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3166) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks