Overview

overview

10

Static

static

3

2024-04-01...ry.exe

windows7-x64

10

2024-04-01...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-01_ba3f4d55608e1e793a4013fcb878514d_wannacry

  • Size

    2.2MB

  • Sample

    240401-r9g8lsgb7x

  • MD5

    ba3f4d55608e1e793a4013fcb878514d

  • SHA1

    4015a5efca7628737c36e7866298897021f70323

  • SHA256

    6290447ea0a64ccd2bf6b98738ea8c1c3139413b1a610097384373a1de6c4d98

  • SHA512

    1de61cd489080c1b20edce0aac3e2a236088c3ff5b9e57e06897bb77907ecb4f5c2068ca2a79c395a8f257cf4030a9525c028cb2a6be2123bde901e4ec86a8b2

  • SSDEEP

    49152:QnpENbcBVQej/hINRx+TSqTdX1HkQo6SAARdhxGi:Qp+oBhzhaRxcSUDk36SAEdhUi

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-04-01_ba3f4d55608e1e793a4013fcb878514d_wannacry

    • Size

      2.2MB

    • MD5

      ba3f4d55608e1e793a4013fcb878514d

    • SHA1

      4015a5efca7628737c36e7866298897021f70323

    • SHA256

      6290447ea0a64ccd2bf6b98738ea8c1c3139413b1a610097384373a1de6c4d98

    • SHA512

      1de61cd489080c1b20edce0aac3e2a236088c3ff5b9e57e06897bb77907ecb4f5c2068ca2a79c395a8f257cf4030a9525c028cb2a6be2123bde901e4ec86a8b2

    • SSDEEP

      49152:QnpENbcBVQej/hINRx+TSqTdX1HkQo6SAARdhxGi:Qp+oBhzhaRxcSUDk36SAEdhUi

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3212) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks