Overview

overview

10

Static

static

3

2024-07-06...ry.exe

windows7-x64

10

2024-07-06...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-06_d589446d31d43c35466f7e3eec3d6139_wannacry

  • Size

    5.0MB

  • Sample

    240706-qapmzayejr

  • MD5

    d589446d31d43c35466f7e3eec3d6139

  • SHA1

    b8790367518561360649cd98723807e1ae52ab97

  • SHA256

    b1d4ab3b68eaab8baefa433ae725490b82a6b295a69e13a5985c3b15bd8e304c

  • SHA512

    f7616d76588e05ee9beb1bc3f4395ce6885252ed89181b6ab9720ef90904ec8f439c86e08d1d3871931f771d329919041c6831eae1777b7e45d1050676e3f134

  • SSDEEP

    49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SA:Z8qPoBhz1aRxcSUDk36SA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-06_d589446d31d43c35466f7e3eec3d6139_wannacry

    • Size

      5.0MB

    • MD5

      d589446d31d43c35466f7e3eec3d6139

    • SHA1

      b8790367518561360649cd98723807e1ae52ab97

    • SHA256

      b1d4ab3b68eaab8baefa433ae725490b82a6b295a69e13a5985c3b15bd8e304c

    • SHA512

      f7616d76588e05ee9beb1bc3f4395ce6885252ed89181b6ab9720ef90904ec8f439c86e08d1d3871931f771d329919041c6831eae1777b7e45d1050676e3f134

    • SSDEEP

      49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SA:Z8qPoBhz1aRxcSUDk36SA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3181) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks