Overview

overview

10

Static

static

3

2024-06-13...ry.exe

windows7-x64

10

2024-06-13...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-13_172a44f381c72d4e5642b5014ec56797_wannacry

  • Size

    3.6MB

  • Sample

    240613-lr6wcstcmf

  • MD5

    172a44f381c72d4e5642b5014ec56797

  • SHA1

    286e8fab2705c020362638d4de23bd982a7de187

  • SHA256

    cf3dabb08817315d7549501c3f27f929d166b63ff57743a9bda1482d78456ac0

  • SHA512

    fb82fe8b4880aed3b91928220fa3a0df39aaadc36b4378cd0d44d9344139d1bcdcf6db0b0591dff50617c726d41fb7bbac427cd19133f670e2c3472497317743

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA4aEau3R8yAH1plAHI:yDqPoBhz1aRxcSUDk36SAX3R8yAVp2HI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-06-13_172a44f381c72d4e5642b5014ec56797_wannacry

    • Size

      3.6MB

    • MD5

      172a44f381c72d4e5642b5014ec56797

    • SHA1

      286e8fab2705c020362638d4de23bd982a7de187

    • SHA256

      cf3dabb08817315d7549501c3f27f929d166b63ff57743a9bda1482d78456ac0

    • SHA512

      fb82fe8b4880aed3b91928220fa3a0df39aaadc36b4378cd0d44d9344139d1bcdcf6db0b0591dff50617c726d41fb7bbac427cd19133f670e2c3472497317743

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA4aEau3R8yAH1plAHI:yDqPoBhz1aRxcSUDk36SAX3R8yAVp2HI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2662) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks