Overview

overview

10

Static

static

3

2024-07-25...ry.exe

windows7-x64

10

2024-07-25...ry.exe

windows10-2004-x64

10

Resubmissions

25-07-2024 17:22

240725-vxtmnatejk 10

25-07-2024 12:33

240725-prbxrssajg 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-25_f448d756bcb064687637869c0f19232a_wannacry

  • Size

    2.2MB

  • Sample

    240725-prbxrssajg

  • MD5

    f448d756bcb064687637869c0f19232a

  • SHA1

    d0754dbcadf6f25788538a9ae65f36f6c5d2f431

  • SHA256

    dfc275107808b93c2bb221f6c440685d50f0453c9b851bbbe184c349d65c5b99

  • SHA512

    f1791bb1926868850426c4c113300d6aec7b393862399865afa612e1598990730e5492e28a63238c0b96ca4d87d5bf61d9c9ae397ff728ae3c607cf7406b376a

  • SSDEEP

    49152:QnUMSEej/1INRx+TSqTdX1HkQo6SAARdhnvn:QUzz1aRxcSUDk36SAEdhvn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-25_f448d756bcb064687637869c0f19232a_wannacry

    • Size

      2.2MB

    • MD5

      f448d756bcb064687637869c0f19232a

    • SHA1

      d0754dbcadf6f25788538a9ae65f36f6c5d2f431

    • SHA256

      dfc275107808b93c2bb221f6c440685d50f0453c9b851bbbe184c349d65c5b99

    • SHA512

      f1791bb1926868850426c4c113300d6aec7b393862399865afa612e1598990730e5492e28a63238c0b96ca4d87d5bf61d9c9ae397ff728ae3c607cf7406b376a

    • SSDEEP

      49152:QnUMSEej/1INRx+TSqTdX1HkQo6SAARdhnvn:QUzz1aRxcSUDk36SAEdhvn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3027) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks