Overview

overview

10

Static

static

3

2024-07-04...ry.exe

windows7-x64

10

2024-07-04...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-04_97ab0e15f3085af2dc678124c127b5d2_wannacry

  • Size

    5.0MB

  • Sample

    240704-pw7v1aygpb

  • MD5

    97ab0e15f3085af2dc678124c127b5d2

  • SHA1

    f66dff3b970b8c5b06e4c4da55e4f3134f25a5f9

  • SHA256

    34c94210a0a348ce1c3342488cef92276ffd200598693b2d288ec582c5142723

  • SHA512

    779f70c2f161b4df477723c7ab5d7eb5f5b90a739a713227bbda094890dce5e2e0c02de1d1a9ee0c31f099de0a3c94b1240d5d0cae128084002ff11e59798ea7

  • SSDEEP

    49152:QnvMSPbcBVQejI+TSqTdX1HkQo6SAARdhnv:QvPoBhccSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-04_97ab0e15f3085af2dc678124c127b5d2_wannacry

    • Size

      5.0MB

    • MD5

      97ab0e15f3085af2dc678124c127b5d2

    • SHA1

      f66dff3b970b8c5b06e4c4da55e4f3134f25a5f9

    • SHA256

      34c94210a0a348ce1c3342488cef92276ffd200598693b2d288ec582c5142723

    • SHA512

      779f70c2f161b4df477723c7ab5d7eb5f5b90a739a713227bbda094890dce5e2e0c02de1d1a9ee0c31f099de0a3c94b1240d5d0cae128084002ff11e59798ea7

    • SSDEEP

      49152:QnvMSPbcBVQejI+TSqTdX1HkQo6SAARdhnv:QvPoBhccSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3305) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks