General
-
Target
2024-05-24_af93351de6cb70e6e2fe6ede04a8d81e_wannacry
-
Size
3.6MB
-
Sample
240524-knyj5sbe9v
-
MD5
af93351de6cb70e6e2fe6ede04a8d81e
-
SHA1
db07861f451b79fda83b194b2e31b873d2fc55ca
-
SHA256
2dcb450c293ca0a52c5f10564e296e4699bcdfd06e46ade8df26f38d6ed9efd3
-
SHA512
f3708bf45912396de1f3af43b22bc1e47b57d748420e87c493a962c69e2b19172a745e3aeff9297279ac19ea9c2b323132963de6fb0074e39407e35fef994473
-
SSDEEP
24576:3bLgurgDdmMSirYbcMNgef0QeQjG/D8kIqJASk+RdhAdmvctA0p+9XEkkN:3nsEMSPbcBVQej/NAARdhnvoAHkN
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_af93351de6cb70e6e2fe6ede04a8d81e_wannacry.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-24_af93351de6cb70e6e2fe6ede04a8d81e_wannacry.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-24_af93351de6cb70e6e2fe6ede04a8d81e_wannacry
-
Size
3.6MB
-
MD5
af93351de6cb70e6e2fe6ede04a8d81e
-
SHA1
db07861f451b79fda83b194b2e31b873d2fc55ca
-
SHA256
2dcb450c293ca0a52c5f10564e296e4699bcdfd06e46ade8df26f38d6ed9efd3
-
SHA512
f3708bf45912396de1f3af43b22bc1e47b57d748420e87c493a962c69e2b19172a745e3aeff9297279ac19ea9c2b323132963de6fb0074e39407e35fef994473
-
SSDEEP
24576:3bLgurgDdmMSirYbcMNgef0QeQjG/D8kIqJASk+RdhAdmvctA0p+9XEkkN:3nsEMSPbcBVQej/NAARdhnvoAHkN
Score10/10-
Modifies firewall policy service
-
Contacts a large (3320) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-