Overview

overview

10

Static

static

3

2024-04-27...ry.exe

windows7-x64

10

2024-04-27...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_643a5d5a26ee3cc0aa144905140abb46_wannacry

  • Size

    5.0MB

  • Sample

    240427-me74bshc2t

  • MD5

    643a5d5a26ee3cc0aa144905140abb46

  • SHA1

    9423aac43d6f050bf794aec379e72c04d9110dbb

  • SHA256

    db3b42afdc2eaab7f17e8a11d1904634b5e59480e498e39c7c9eb2148a64ddcf

  • SHA512

    e7e07a7e8d85c2d300d6f908ee0b554aa51630ca36a11a1ee656313f3809bde5276c9e1bac704499f4336ebde75a9676e221ebdfe1d9485bc6ac248cd92a160c

  • SSDEEP

    49152:QnsEMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAR:QfPoBhz1aRxcSUDk36SAE

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-04-27_643a5d5a26ee3cc0aa144905140abb46_wannacry

    • Size

      5.0MB

    • MD5

      643a5d5a26ee3cc0aa144905140abb46

    • SHA1

      9423aac43d6f050bf794aec379e72c04d9110dbb

    • SHA256

      db3b42afdc2eaab7f17e8a11d1904634b5e59480e498e39c7c9eb2148a64ddcf

    • SHA512

      e7e07a7e8d85c2d300d6f908ee0b554aa51630ca36a11a1ee656313f3809bde5276c9e1bac704499f4336ebde75a9676e221ebdfe1d9485bc6ac248cd92a160c

    • SSDEEP

      49152:QnsEMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAR:QfPoBhz1aRxcSUDk36SAE

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2667) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks