wannacry | 8a818b50f15849b51ba1e44a277892acf43414d68a6d33dce11578e0fcf62616 | Triage

Submit
Reports

Overview

overview

Static

static

3

20240702ec...ry.exe

windows7-x64

20240702ec...ry.exe

windows10-2004-x64

Sharing

General

Target

20240702eccd28b3b9d6ede255e33afbf7686a12wannacry
Size

5.0MB
Sample

240704-k9mprswejh
MD5

eccd28b3b9d6ede255e33afbf7686a12
SHA1

e4808dcf7b9ee5d2339dfd3056e31776e7710d7f
SHA256

8a818b50f15849b51ba1e44a277892acf43414d68a6d33dce11578e0fcf62616
SHA512

c1460d76d154f55c1abc06d95b0c354ff39000442bda18b0524c82d675f24a3bfa3735938a4eda907f9c192598a63debdabf0ea35ed9575dedf67c5764d2576d
SSDEEP

24576:2bLgddQhfdmMSirYbcMNgef0QeQjGenEaut/8uME7A4kqAH1pNZtA0p+9XEk:2nAQqMSPbcBVQejcEau3R8yAH1plAH

Score

10^/10

wannacry discovery ransomware worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

20240702eccd28b3b9d6ede255e33afbf7686a12wannacry.exe

Resource

win7-20231129-en

wannacry discovery ransomware worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

20240702eccd28b3b9d6ede255e33afbf7686a12wannacry.exe

Resource

win10v2004-20240508-en

wannacry discovery ransomware worm

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  20240702eccd28b3b9d6ede255e33afbf7686a12wannacry
- Size
  
  5.0MB
- MD5
  
  eccd28b3b9d6ede255e33afbf7686a12
- SHA1
  
  e4808dcf7b9ee5d2339dfd3056e31776e7710d7f
- SHA256
  
  8a818b50f15849b51ba1e44a277892acf43414d68a6d33dce11578e0fcf62616
- SHA512
  
  c1460d76d154f55c1abc06d95b0c354ff39000442bda18b0524c82d675f24a3bfa3735938a4eda907f9c192598a63debdabf0ea35ed9575dedf67c5764d2576d
- SSDEEP
  
  24576:2bLgddQhfdmMSirYbcMNgef0QeQjGenEaut/8uME7A4kqAH1pNZtA0p+9XEk:2nAQqMSPbcBVQejcEau3R8yAH1plAH
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3268) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm

© 2018-2025

Terms | Privacy