Overview

overview

10

Static

static

3

2024-07-02...ry.exe

windows7-x64

10

2024-07-02...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-02_eccd28b3b9d6ede255e33afbf7686a12_wannacry

  • Size

    5.0MB

  • Sample

    240702-s7d9lstenn

  • MD5

    eccd28b3b9d6ede255e33afbf7686a12

  • SHA1

    e4808dcf7b9ee5d2339dfd3056e31776e7710d7f

  • SHA256

    8a818b50f15849b51ba1e44a277892acf43414d68a6d33dce11578e0fcf62616

  • SHA512

    c1460d76d154f55c1abc06d95b0c354ff39000442bda18b0524c82d675f24a3bfa3735938a4eda907f9c192598a63debdabf0ea35ed9575dedf67c5764d2576d

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0QeQjGenEaut/8uME7A4kqAH1pNZtA0p+9XEk:2nAQqMSPbcBVQejcEau3R8yAH1plAH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-02_eccd28b3b9d6ede255e33afbf7686a12_wannacry

    • Size

      5.0MB

    • MD5

      eccd28b3b9d6ede255e33afbf7686a12

    • SHA1

      e4808dcf7b9ee5d2339dfd3056e31776e7710d7f

    • SHA256

      8a818b50f15849b51ba1e44a277892acf43414d68a6d33dce11578e0fcf62616

    • SHA512

      c1460d76d154f55c1abc06d95b0c354ff39000442bda18b0524c82d675f24a3bfa3735938a4eda907f9c192598a63debdabf0ea35ed9575dedf67c5764d2576d

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0QeQjGenEaut/8uME7A4kqAH1pNZtA0p+9XEk:2nAQqMSPbcBVQejcEau3R8yAH1plAH

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3236) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks