Overview

overview

10

Static

static

3

2024-06-15...ry.exe

windows7-x64

10

2024-06-15...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-15_a9fc19a8ac8150c4654bcbb2c0fb0c18_wannacry

  • Size

    5.0MB

  • Sample

    240615-nfwx5asdnk

  • MD5

    a9fc19a8ac8150c4654bcbb2c0fb0c18

  • SHA1

    907afece4225e0858fe5b93e187faff815fef368

  • SHA256

    bc71972072b2559d78079c41e79f9fb808be3a8a3473439ea0485d1712d4cbd9

  • SHA512

    ddfc1bd0c852bac92170da73a8b7d8469fc3b03b20a78db58d0e4c7dfcce8591ef30fc83fe3d0d1c926b5ba87fd15e81ee722c53719a7acf1f67f6efddf0f702

  • SSDEEP

    98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P5rwz3Qqgbz:XDqPe1Cxcxk3ZAEUad9wMt3

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-06-15_a9fc19a8ac8150c4654bcbb2c0fb0c18_wannacry

    • Size

      5.0MB

    • MD5

      a9fc19a8ac8150c4654bcbb2c0fb0c18

    • SHA1

      907afece4225e0858fe5b93e187faff815fef368

    • SHA256

      bc71972072b2559d78079c41e79f9fb808be3a8a3473439ea0485d1712d4cbd9

    • SHA512

      ddfc1bd0c852bac92170da73a8b7d8469fc3b03b20a78db58d0e4c7dfcce8591ef30fc83fe3d0d1c926b5ba87fd15e81ee722c53719a7acf1f67f6efddf0f702

    • SSDEEP

      98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P5rwz3Qqgbz:XDqPe1Cxcxk3ZAEUad9wMt3

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3117) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks