Overview

overview

10

Static

static

3

2024-07-02...ry.exe

windows7-x64

10

2024-07-02...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-02_82ad20f7216ba47eddfe5f9c2bcf9fce_wannacry

  • Size

    5.0MB

  • Sample

    240702-sqwsbsycph

  • MD5

    82ad20f7216ba47eddfe5f9c2bcf9fce

  • SHA1

    8c669c666f2c42cbb37c2505d00495c6d023855c

  • SHA256

    69e2a4bd84ab85c7d65263d35195ffaa6d626d4a15943398ae8692093bf83086

  • SHA512

    d425327ce162013d68ab868009449f642678c6a4c5ccbc561963a21535dd3b279c08761c42e57c280e70f3afbe3c4b19efbf6a1ad82abba2a3dd1366ff879a7d

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAk3R8yAH1plAH:yDqPoBhz1aRxcSUDk36SAD3R8yAVp2H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-02_82ad20f7216ba47eddfe5f9c2bcf9fce_wannacry

    • Size

      5.0MB

    • MD5

      82ad20f7216ba47eddfe5f9c2bcf9fce

    • SHA1

      8c669c666f2c42cbb37c2505d00495c6d023855c

    • SHA256

      69e2a4bd84ab85c7d65263d35195ffaa6d626d4a15943398ae8692093bf83086

    • SHA512

      d425327ce162013d68ab868009449f642678c6a4c5ccbc561963a21535dd3b279c08761c42e57c280e70f3afbe3c4b19efbf6a1ad82abba2a3dd1366ff879a7d

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAk3R8yAH1plAH:yDqPoBhz1aRxcSUDk36SAD3R8yAVp2H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2677) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks