Overview

overview

10

Static

static

3

2024-07-05...ry.exe

windows7-x64

10

2024-07-05...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-05_d92332e476685d0cfe0fca5dc060f625_wannacry

  • Size

    5.0MB

  • Sample

    240705-pfakka1aqe

  • MD5

    d92332e476685d0cfe0fca5dc060f625

  • SHA1

    5e9ca2efdc4b775ece0f1e1dadeabce0255ba5d3

  • SHA256

    b063505b0b1581f2cfd27510b252d690f5ddba4f21c60efe2718292369c40d60

  • SHA512

    f8d33be4d060087bfbfe51fbeff3c94453b7f6218d029420b5717865bccceb7ed976d6b997a00edaa7ceff1e08b4e9ea88cfb0c6032593bc702d9e8c750c02f5

  • SSDEEP

    49152:UnpENPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:EpOoBhz1aRxcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-05_d92332e476685d0cfe0fca5dc060f625_wannacry

    • Size

      5.0MB

    • MD5

      d92332e476685d0cfe0fca5dc060f625

    • SHA1

      5e9ca2efdc4b775ece0f1e1dadeabce0255ba5d3

    • SHA256

      b063505b0b1581f2cfd27510b252d690f5ddba4f21c60efe2718292369c40d60

    • SHA512

      f8d33be4d060087bfbfe51fbeff3c94453b7f6218d029420b5717865bccceb7ed976d6b997a00edaa7ceff1e08b4e9ea88cfb0c6032593bc702d9e8c750c02f5

    • SSDEEP

      49152:UnpENPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:EpOoBhz1aRxcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2685) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks