Overview

overview

10

Static

static

3

2024-05-27...ry.exe

windows7-x64

10

2024-05-27...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-27_733c208c721a3a88b239d265bc93b53a_wannacry

  • Size

    2.2MB

  • Sample

    240527-efs2ssgc37

  • MD5

    733c208c721a3a88b239d265bc93b53a

  • SHA1

    a948853377a4333f153b57f4ad5d734c89ae49f4

  • SHA256

    db3cd4b0fb816bd104fc9587d35572450d9a8d1c53876cb9ee9ce26e4469b792

  • SHA512

    93e7c2a7be77b3f23b6018ed958b23eb98d1ad03dc83fcae5bbb1cdc03a031896fa4e696e388542c8dba229311e95f7ab5fa94c6287ac31a63565f053c755937

  • SSDEEP

    49152:QnpEKUv9wC7+VQej/1INRx+TSqTdX1HkQo6SAzRdhnv/:Qpyv+Fhz1aRxcSUDk36SANdhv/

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-05-27_733c208c721a3a88b239d265bc93b53a_wannacry

    • Size

      2.2MB

    • MD5

      733c208c721a3a88b239d265bc93b53a

    • SHA1

      a948853377a4333f153b57f4ad5d734c89ae49f4

    • SHA256

      db3cd4b0fb816bd104fc9587d35572450d9a8d1c53876cb9ee9ce26e4469b792

    • SHA512

      93e7c2a7be77b3f23b6018ed958b23eb98d1ad03dc83fcae5bbb1cdc03a031896fa4e696e388542c8dba229311e95f7ab5fa94c6287ac31a63565f053c755937

    • SSDEEP

      49152:QnpEKUv9wC7+VQej/1INRx+TSqTdX1HkQo6SAzRdhnv/:Qpyv+Fhz1aRxcSUDk36SANdhv/

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3295) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks