Overview

overview

10

Static

static

3

2024-06-20...ry.exe

windows7-x64

10

2024-06-20...ry.exe

windows10-2004-x64

10

Resubmissions

23-07-2024 13:41

240723-qy4f2asgll 10

20-06-2024 13:29

240620-qq9yvazelb 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-20_f8f8a7957a6842794bd956c655e72e1c_wannacry

  • Size

    5.0MB

  • Sample

    240620-qq9yvazelb

  • MD5

    f8f8a7957a6842794bd956c655e72e1c

  • SHA1

    682f3a12d043fa17546e6d45e99e82c8c1ef997d

  • SHA256

    e0bb2977e9d0f4e8f59b966634f89727a5ebe103adb4c9f5e59a0318fea18529

  • SHA512

    baf7437a783a83e022eee017a153f39d76332a39a83cc1a323b17d1808da0719c100ef70d69611997d7baa156eb1fb63dd47f33f202ad99b2a11048dd7b57912

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0VeX6SASk+Kdq:2nAQqMSPbcBVU6SAA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-06-20_f8f8a7957a6842794bd956c655e72e1c_wannacry

    • Size

      5.0MB

    • MD5

      f8f8a7957a6842794bd956c655e72e1c

    • SHA1

      682f3a12d043fa17546e6d45e99e82c8c1ef997d

    • SHA256

      e0bb2977e9d0f4e8f59b966634f89727a5ebe103adb4c9f5e59a0318fea18529

    • SHA512

      baf7437a783a83e022eee017a153f39d76332a39a83cc1a323b17d1808da0719c100ef70d69611997d7baa156eb1fb63dd47f33f202ad99b2a11048dd7b57912

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0VeX6SASk+Kdq:2nAQqMSPbcBVU6SAA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2670) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks