wannacry

Resubmissions

26-05-2024 19:45

240526-yglhwshf2y 10

26-05-2024 18:09

240526-wrsc3sfg58 10

Sharing

Copy URL

Twitter E-mail

General

Target

765c4c601581249e11bfb2f87e06f502_JaffaCakes118
Size

5.0MB
Sample

240526-yglhwshf2y
MD5

765c4c601581249e11bfb2f87e06f502
SHA1

09cf9e55abf0a83cb7524a693ea77d8f9af81e15
SHA256

b31f2f762aea78f69dff795dc5a2a0a7bc102f9628308f8deaea2bf3297c076d
SHA512

afe5e70ad02c91054d8e0158b1fd35e266d11be6f59cad7cd3c414f2c2dd1b1cc586d2f2c3d0d7a508c9fbf1a36c17a04c95f35322de728ca4785f210e5a5649
SSDEEP

98304:+DqPoBcRxcSUDk36SAEdhvxWa9P593R8yAVp2H:+DqPHxcxk3ZAEUadzR8yc4H

Score

10^/10

Malware Config

Targets

- Target
  
  765c4c601581249e11bfb2f87e06f502_JaffaCakes118
- Size
  
  5.0MB
- MD5
  
  765c4c601581249e11bfb2f87e06f502
- SHA1
  
  09cf9e55abf0a83cb7524a693ea77d8f9af81e15
- SHA256
  
  b31f2f762aea78f69dff795dc5a2a0a7bc102f9628308f8deaea2bf3297c076d
- SHA512
  
  afe5e70ad02c91054d8e0158b1fd35e266d11be6f59cad7cd3c414f2c2dd1b1cc586d2f2c3d0d7a508c9fbf1a36c17a04c95f35322de728ca4785f210e5a5649
- SSDEEP
  
  98304:+DqPoBcRxcSUDk36SAEdhvxWa9P593R8yAVp2H:+DqPHxcxk3ZAEUadzR8yc4H
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3286) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Contacts a large (3286) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2