Overview

overview

10

Static

static

3

2024-06-19...ry.exe

windows7-x64

10

2024-06-19...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-19_fcac2e91e61fab8e3400daf5e3bca47f_wannacry

  • Size

    5.0MB

  • Sample

    240619-qd4las1cld

  • MD5

    fcac2e91e61fab8e3400daf5e3bca47f

  • SHA1

    8cf3c6838ace0cd4a78356297c47f0c0cb0f7133

  • SHA256

    6f95b0262d8420f0c3be2f69d44ee362f48f51a400eb355dacb45fb6f297fac1

  • SHA512

    7ec1b48988084be6cffc89c07ae77ef4365e57e4af08552d0691f0f40bafdcddc11d03d84ba76dd2aa56805d399bbbac8ea6e28697711a2bbf9ff6263f79e29c

  • SSDEEP

    24576:QbLgurgQhfdmMSirYbcMNgef0QeQjGIkQg6eX6SASkjTiif0Xc/OXlc3:QnsQqMSPbcBVQejIkQo6SArf0XdX63

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-06-19_fcac2e91e61fab8e3400daf5e3bca47f_wannacry

    • Size

      5.0MB

    • MD5

      fcac2e91e61fab8e3400daf5e3bca47f

    • SHA1

      8cf3c6838ace0cd4a78356297c47f0c0cb0f7133

    • SHA256

      6f95b0262d8420f0c3be2f69d44ee362f48f51a400eb355dacb45fb6f297fac1

    • SHA512

      7ec1b48988084be6cffc89c07ae77ef4365e57e4af08552d0691f0f40bafdcddc11d03d84ba76dd2aa56805d399bbbac8ea6e28697711a2bbf9ff6263f79e29c

    • SSDEEP

      24576:QbLgurgQhfdmMSirYbcMNgef0QeQjGIkQg6eX6SASkjTiif0Xc/OXlc3:QnsQqMSPbcBVQejIkQo6SArf0XdX63

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3301) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks