wannacry | 995ac064ae1ef4fc1876568924da5f06a4452d5368136857ba4c5a419cca6fa4 | Triage

Sharing

General

Target

2024-07-27_2f586cf65725d185bad84000c5878549_wannacry
Size

3.4MB
Sample

240727-mt4z8ayana
MD5

2f586cf65725d185bad84000c5878549
SHA1

ad89f2e79053fedfd20c6a22a50e0f291d550c9a
SHA256

995ac064ae1ef4fc1876568924da5f06a4452d5368136857ba4c5a419cca6fa4
SHA512

e8ca5baae2172b3b703bebb91bcc2b0cff7ce86c782e1a58b739e77db41dd4a949353ec2265eceaa384a5485be57a7411da8c588d2cf8455ca9bf678f9eed027
SSDEEP

98304:QqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H4:QqPe1Cxcxk3ZAEUadzR8yc4H4

Score

10^/10

wannacry defense_evasion discovery ransomware worm

Malware Config

Targets

- Target
  
  2024-07-27_2f586cf65725d185bad84000c5878549_wannacry
- Size
  
  3.4MB
- MD5
  
  2f586cf65725d185bad84000c5878549
- SHA1
  
  ad89f2e79053fedfd20c6a22a50e0f291d550c9a
- SHA256
  
  995ac064ae1ef4fc1876568924da5f06a4452d5368136857ba4c5a419cca6fa4
- SHA512
  
  e8ca5baae2172b3b703bebb91bcc2b0cff7ce86c782e1a58b739e77db41dd4a949353ec2265eceaa384a5485be57a7411da8c588d2cf8455ca9bf678f9eed027
- SSDEEP
  
  98304:QqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H4:QqPe1Cxcxk3ZAEUadzR8yc4H4
Score

10^/10

wannacry defense_evasion discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Modifies file permissions
  discovery
- File and Directory Permissions Modification: Windows File and Directory Permissions Modification
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Windows File and Directory Permissions Modification

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydefense_evasiondiscoveryransomwareworm

behavioral2

wannacrydefense_evasiondiscoveryransomwareworm