Overview

overview

10

Static

static

3

2024-07-05...ry.exe

windows7-x64

10

2024-07-05...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-05_702737badf91c84ce7053b6cc66879c5_wannacry

  • Size

    3.6MB

  • Sample

    240705-jrcamsxdlf

  • MD5

    702737badf91c84ce7053b6cc66879c5

  • SHA1

    28a500b016a7b2266b0c3ef89a43d755043fe6af

  • SHA256

    7adf5e7f49313da0f967fb9213e66fee4cb6bf7472b5513ea0d9b87908b9837f

  • SHA512

    9b15dfff18f70174c75fc7b0e6344ba4011ceab43b89cc34f7957a6531ca57ef6ba2b653fcf75fc4bc772a506fd7db25e83c7872313c2baebc545e89ee779f49

  • SSDEEP

    98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yADxc:Z8qPe1Cxcxk3ZAEUadzR8y+xc

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-05_702737badf91c84ce7053b6cc66879c5_wannacry

    • Size

      3.6MB

    • MD5

      702737badf91c84ce7053b6cc66879c5

    • SHA1

      28a500b016a7b2266b0c3ef89a43d755043fe6af

    • SHA256

      7adf5e7f49313da0f967fb9213e66fee4cb6bf7472b5513ea0d9b87908b9837f

    • SHA512

      9b15dfff18f70174c75fc7b0e6344ba4011ceab43b89cc34f7957a6531ca57ef6ba2b653fcf75fc4bc772a506fd7db25e83c7872313c2baebc545e89ee779f49

    • SSDEEP

      98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yADxc:Z8qPe1Cxcxk3ZAEUadzR8y+xc

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3227) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks