Overview

overview

10

Static

static

3

2024-07-25...ry.exe

windows7-x64

10

2024-07-25...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-25_01e57b1711f09b2f17ad147ba726df61_wannacry

  • Size

    5.0MB

  • Sample

    240725-lqgj3sthjh

  • MD5

    01e57b1711f09b2f17ad147ba726df61

  • SHA1

    6b5a2d391611a5e76b8964ef08faec459e7f3f2f

  • SHA256

    e90064c67c230e4092bf422898be34e803854b3c8f779141f9704a21fbb49f59

  • SHA512

    4e8d0e997df6b7a96de9be618ee03ccf7c7068e87832ef99a8091b56a7c34660ffce848a1d2ad4410c1a93e4e15a65c1a723596326abedd45139acc6640b011c

  • SSDEEP

    49152:2nAJMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:yuPoBhz1aRxcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-25_01e57b1711f09b2f17ad147ba726df61_wannacry

    • Size

      5.0MB

    • MD5

      01e57b1711f09b2f17ad147ba726df61

    • SHA1

      6b5a2d391611a5e76b8964ef08faec459e7f3f2f

    • SHA256

      e90064c67c230e4092bf422898be34e803854b3c8f779141f9704a21fbb49f59

    • SHA512

      4e8d0e997df6b7a96de9be618ee03ccf7c7068e87832ef99a8091b56a7c34660ffce848a1d2ad4410c1a93e4e15a65c1a723596326abedd45139acc6640b011c

    • SSDEEP

      49152:2nAJMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:yuPoBhz1aRxcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3199) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks