Overview

overview

10

Static

static

3

2024-06-22...ry.exe

windows7-x64

10

2024-06-22...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-22_31b1914e665c2729ca4e3d0bde5507f2_wannacry

  • Size

    3.6MB

  • Sample

    240622-lehb8swhjm

  • MD5

    31b1914e665c2729ca4e3d0bde5507f2

  • SHA1

    4e824039d512c5df01940352c49539bf9a6990b0

  • SHA256

    51252f2fe823a3b3edd9c1db720eb3a766b9bf682b54d70b6b5bd454439ef82a

  • SHA512

    462722f5979ff06cac40d2d782b024af847818e4a1fe9de8794a938d2eea3faf46690da94c60695b80d1bdf4d488a6e61db1bb35d66fcccc4452e67d26482078

  • SSDEEP

    49152:2nAQD0y4YnEEeZezw2uvgyd7+KnT2becwT6DGMIBHuLZyLUcRhRt/IbmwW6LC:yDD0yKi9ywKSbevWSdOLZSPebdWOC

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-06-22_31b1914e665c2729ca4e3d0bde5507f2_wannacry

    • Size

      3.6MB

    • MD5

      31b1914e665c2729ca4e3d0bde5507f2

    • SHA1

      4e824039d512c5df01940352c49539bf9a6990b0

    • SHA256

      51252f2fe823a3b3edd9c1db720eb3a766b9bf682b54d70b6b5bd454439ef82a

    • SHA512

      462722f5979ff06cac40d2d782b024af847818e4a1fe9de8794a938d2eea3faf46690da94c60695b80d1bdf4d488a6e61db1bb35d66fcccc4452e67d26482078

    • SSDEEP

      49152:2nAQD0y4YnEEeZezw2uvgyd7+KnT2becwT6DGMIBHuLZyLUcRhRt/IbmwW6LC:yDD0yKi9ywKSbevWSdOLZSPebdWOC

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3328) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks