Overview

overview

10

Static

static

3

2024-03-30...ry.exe

windows7-x64

10

2024-03-30...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-30_01c4f6da599c61262916e58c6769da58_wannacry

  • Size

    3.6MB

  • Sample

    240330-mrnkfseb52

  • MD5

    01c4f6da599c61262916e58c6769da58

  • SHA1

    8d976134841092646aa2e11fd5b36b800a9983bc

  • SHA256

    27224344bcbd2e4b2baef34a42d5a68ae2ae0f666bedb4b2ab701c7ba3208c64

  • SHA512

    f4a3c5700d2b2c712980943b59b0b75cc64028978e9e38f014b882c1f1889c769e56c05491a52a87163c528436777a9ec4f515df6c013a6d5b3f19b54e1bb461

  • SSDEEP

    49152:XnjQqMSPbcBVQej/hINRx+TSqTdX1HkQo6SAARHqG:X8qPoBhzhaRxcSUDk36SAEHH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-03-30_01c4f6da599c61262916e58c6769da58_wannacry

    • Size

      3.6MB

    • MD5

      01c4f6da599c61262916e58c6769da58

    • SHA1

      8d976134841092646aa2e11fd5b36b800a9983bc

    • SHA256

      27224344bcbd2e4b2baef34a42d5a68ae2ae0f666bedb4b2ab701c7ba3208c64

    • SHA512

      f4a3c5700d2b2c712980943b59b0b75cc64028978e9e38f014b882c1f1889c769e56c05491a52a87163c528436777a9ec4f515df6c013a6d5b3f19b54e1bb461

    • SSDEEP

      49152:XnjQqMSPbcBVQej/hINRx+TSqTdX1HkQo6SAARHqG:X8qPoBhzhaRxcSUDk36SAEHH

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3163) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks