Overview

overview

10

Static

static

3

2024-03-21...ry.exe

windows7-x64

10

2024-03-21...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-21_27d4ab52051c4301f3f4dbde2048f70b_wannacry

  • Size

    3.6MB

  • Sample

    240321-d9ycyabb44

  • MD5

    27d4ab52051c4301f3f4dbde2048f70b

  • SHA1

    b264e9a3d3d458b0406f61f2b1ceb23ea93afa71

  • SHA256

    394f5f0c94ef94a46a4977520fb9d2802a275803ba65f66051834f1c15c286e8

  • SHA512

    646105519b407d1ec51b19dc0a0786322c937d875b9643f029d19c69cd1a3d96fc1b34feb17077d51bc7e1e89c82fc9e763c8a26f45dc2ff18c96c63a9225d7b

  • SSDEEP

    98304:yDqPoBqaRxcSUDk36SAVxWa9P593R8yAVp2HI:yDqPTCxcxk3ZAOadzR8yc4HI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-03-21_27d4ab52051c4301f3f4dbde2048f70b_wannacry

    • Size

      3.6MB

    • MD5

      27d4ab52051c4301f3f4dbde2048f70b

    • SHA1

      b264e9a3d3d458b0406f61f2b1ceb23ea93afa71

    • SHA256

      394f5f0c94ef94a46a4977520fb9d2802a275803ba65f66051834f1c15c286e8

    • SHA512

      646105519b407d1ec51b19dc0a0786322c937d875b9643f029d19c69cd1a3d96fc1b34feb17077d51bc7e1e89c82fc9e763c8a26f45dc2ff18c96c63a9225d7b

    • SSDEEP

      98304:yDqPoBqaRxcSUDk36SAVxWa9P593R8yAVp2HI:yDqPTCxcxk3ZAOadzR8yc4HI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3141) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks