Overview

overview

10

Static

static

3

2024-03-18...ry.exe

windows7-x64

10

2024-03-18...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-18_58952ce013e51eaabadd4bf9f5981801_wannacry

  • Size

    3.6MB

  • Sample

    240318-t67p7sdh6x

  • MD5

    58952ce013e51eaabadd4bf9f5981801

  • SHA1

    6005d50cd4746a12c4032d6ccc92c86a0813ef90

  • SHA256

    8a25adc3269517904c641edaa2fc61266470c4805c795b410a319425cdcc8030

  • SHA512

    57d690f1577c3fe03b6ee0d6ab77bae0418b7ef67cfd218802a690c2e5c670d8535f5bef90a1d2bfe34cc56aec295ee6248e72ba714cb7a3b87890f7e73104e4

  • SSDEEP

    49152:2nAQqMSPbcBVQejXgwuqzgX8knK4JKARyPHRieT:yDqPoBhb

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-03-18_58952ce013e51eaabadd4bf9f5981801_wannacry

    • Size

      3.6MB

    • MD5

      58952ce013e51eaabadd4bf9f5981801

    • SHA1

      6005d50cd4746a12c4032d6ccc92c86a0813ef90

    • SHA256

      8a25adc3269517904c641edaa2fc61266470c4805c795b410a319425cdcc8030

    • SHA512

      57d690f1577c3fe03b6ee0d6ab77bae0418b7ef67cfd218802a690c2e5c670d8535f5bef90a1d2bfe34cc56aec295ee6248e72ba714cb7a3b87890f7e73104e4

    • SSDEEP

      49152:2nAQqMSPbcBVQejXgwuqzgX8knK4JKARyPHRieT:yDqPoBhb

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3058) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks