Overview

overview

10

Static

static

3

2024-07-28...ry.exe

windows7-x64

10

2024-07-28...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-28_e1610231b159795f7cf87396bf55fa7d_wannacry

  • Size

    5.0MB

  • Sample

    240728-n3zmjawgmq

  • MD5

    e1610231b159795f7cf87396bf55fa7d

  • SHA1

    ae211213d7a54e39d11f87b20824e846825dc298

  • SHA256

    bd45eaf34858917fca6aa2b846f5cf9382440cd91d12ba307cf9a7ef805205b9

  • SHA512

    733babd104616d1d949dfb64228d6e944c1885b39edee83a306643a627b877ee61aa439940eb5f2fdeb4497d530ce688f96fe1635469662bf9c127a9284de40e

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYo:2nAQqMSPbcBVQej/1

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-28_e1610231b159795f7cf87396bf55fa7d_wannacry

    • Size

      5.0MB

    • MD5

      e1610231b159795f7cf87396bf55fa7d

    • SHA1

      ae211213d7a54e39d11f87b20824e846825dc298

    • SHA256

      bd45eaf34858917fca6aa2b846f5cf9382440cd91d12ba307cf9a7ef805205b9

    • SHA512

      733babd104616d1d949dfb64228d6e944c1885b39edee83a306643a627b877ee61aa439940eb5f2fdeb4497d530ce688f96fe1635469662bf9c127a9284de40e

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYo:2nAQqMSPbcBVQej/1

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3318) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks