Overview

overview

10

Static

static

3

20240527cd...ry.exe

windows7-x64

10

20240527cd...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20240527cd797e42ff018db9df58d8be0fbb9b29wannacry.exe

  • Size

    3.6MB

  • Sample

    240527-19pgcsdb94

  • MD5

    cd797e42ff018db9df58d8be0fbb9b29

  • SHA1

    feebc9f49bd28756c02950fc39292d858e4e5b65

  • SHA256

    975f0c9a2bb4a0bf2a022af615452e6049577899495cd7bdfb0a9fa6084964ff

  • SHA512

    e5fb2c395a3e08e7cbecdb0c2bffaff2266150bf890008127a882fe2d6d7a141178c16166d1146d9efe6951ca16750f96f516846cc9969864260ce3327b07840

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9M/LvuDOO:yDqPe1Cxcxk3ZAEUaOyOO

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      20240527cd797e42ff018db9df58d8be0fbb9b29wannacry.exe

    • Size

      3.6MB

    • MD5

      cd797e42ff018db9df58d8be0fbb9b29

    • SHA1

      feebc9f49bd28756c02950fc39292d858e4e5b65

    • SHA256

      975f0c9a2bb4a0bf2a022af615452e6049577899495cd7bdfb0a9fa6084964ff

    • SHA512

      e5fb2c395a3e08e7cbecdb0c2bffaff2266150bf890008127a882fe2d6d7a141178c16166d1146d9efe6951ca16750f96f516846cc9969864260ce3327b07840

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9M/LvuDOO:yDqPe1Cxcxk3ZAEUaOyOO

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3281) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks