Overview

overview

10

Static

static

3

2024-06-17...ry.exe

windows7-x64

10

2024-06-17...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-17_9c7f3ba566feb0e15eecba09411fb752_wannacry

  • Size

    3.6MB

  • Sample

    240617-hnkl6sygra

  • MD5

    9c7f3ba566feb0e15eecba09411fb752

  • SHA1

    7082a58761dc5d7f80b9bb20015b0ac83f3004c8

  • SHA256

    8bf2708da1148d2d804394b9d1750e6555ab74972b1d0696c03448301f489efd

  • SHA512

    bb2a9fc1fcb62e10f1d3fa99ef706418c32777fd1d9643a800ea2254ea492826ddb74db2ec12ec151771e6668105d15b2bbf2998df3fa0a1ad383233c72e20fe

  • SSDEEP

    98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P5rwz3Qqgbzh:XDqPe1Cxcxk3ZAEUad9wMt3h

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-06-17_9c7f3ba566feb0e15eecba09411fb752_wannacry

    • Size

      3.6MB

    • MD5

      9c7f3ba566feb0e15eecba09411fb752

    • SHA1

      7082a58761dc5d7f80b9bb20015b0ac83f3004c8

    • SHA256

      8bf2708da1148d2d804394b9d1750e6555ab74972b1d0696c03448301f489efd

    • SHA512

      bb2a9fc1fcb62e10f1d3fa99ef706418c32777fd1d9643a800ea2254ea492826ddb74db2ec12ec151771e6668105d15b2bbf2998df3fa0a1ad383233c72e20fe

    • SSDEEP

      98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P5rwz3Qqgbzh:XDqPe1Cxcxk3ZAEUad9wMt3h

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3205) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks