Overview

overview

10

Static

static

3

2024-06-20...ry.exe

windows7-x64

10

2024-06-20...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-20_9f39db25e92f01266b2fd453d105d802_wannacry

  • Size

    2.2MB

  • Sample

    240620-m18lzsxgmj

  • MD5

    9f39db25e92f01266b2fd453d105d802

  • SHA1

    b9ed7fc5839403e87119716fa94fe3bb73b56f10

  • SHA256

    658ecb99e90cf4ce00a358a58d9e6e6468157147c73ccaae9f8e600dbb06aadd

  • SHA512

    5bb998f1763cf15aee7e0aaacd40bc28dc2a6d2b152d4c8bb530d526f2e1c1bcfad0250a70c6a987d1073470e90061dccf80b3d6b6e6c5faa9892b5f7ba704f4

  • SSDEEP

    24576:QbLgurgQhfdmMSirYbcMNgef0QeQjGIkQg6eX6SASkjTiif0Xc/OXlc38:QnsQqMSPbcBVQejIkQo6SArf0XdX638

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-06-20_9f39db25e92f01266b2fd453d105d802_wannacry

    • Size

      2.2MB

    • MD5

      9f39db25e92f01266b2fd453d105d802

    • SHA1

      b9ed7fc5839403e87119716fa94fe3bb73b56f10

    • SHA256

      658ecb99e90cf4ce00a358a58d9e6e6468157147c73ccaae9f8e600dbb06aadd

    • SHA512

      5bb998f1763cf15aee7e0aaacd40bc28dc2a6d2b152d4c8bb530d526f2e1c1bcfad0250a70c6a987d1073470e90061dccf80b3d6b6e6c5faa9892b5f7ba704f4

    • SSDEEP

      24576:QbLgurgQhfdmMSirYbcMNgef0QeQjGIkQg6eX6SASkjTiif0Xc/OXlc38:QnsQqMSPbcBVQejIkQo6SArf0XdX638

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3209) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks