Overview

overview

10

Static

static

3

2024-05-08...ry.exe

windows7-x64

10

2024-05-08...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-08_c99f40fc2c9de197cd089e4916a0b8bc_wannacry

  • Size

    5.0MB

  • Sample

    240508-mlhf9agb3w

  • MD5

    c99f40fc2c9de197cd089e4916a0b8bc

  • SHA1

    122fee5889703c32acf4ccd6a82271ec3692b997

  • SHA256

    0063d962821c9cf9d4943a3f4f48eea27ba7300a4f7735d6dd76ee35d408c228

  • SHA512

    1f8b86a7517747deb6aa73cf816fc6d10876f959ec8f28e06c38aed5cd5153112d5d41f2b0332883244fada9d6c296a4ca6fb366c84a84e0a0b591eb047f1582

  • SSDEEP

    49152:vnREMSPbcBVQej/1INix+TSqTdX1HkQo6SAARdhnv:/SPoBhz1aixcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-05-08_c99f40fc2c9de197cd089e4916a0b8bc_wannacry

    • Size

      5.0MB

    • MD5

      c99f40fc2c9de197cd089e4916a0b8bc

    • SHA1

      122fee5889703c32acf4ccd6a82271ec3692b997

    • SHA256

      0063d962821c9cf9d4943a3f4f48eea27ba7300a4f7735d6dd76ee35d408c228

    • SHA512

      1f8b86a7517747deb6aa73cf816fc6d10876f959ec8f28e06c38aed5cd5153112d5d41f2b0332883244fada9d6c296a4ca6fb366c84a84e0a0b591eb047f1582

    • SSDEEP

      49152:vnREMSPbcBVQej/1INix+TSqTdX1HkQo6SAARdhnv:/SPoBhz1aixcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2881) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks