wannacry | f8b6718f4c775c50ffa47c09209880a16292de70c142a34ea9cb5dde10e5a0f2 | Triage

Sharing

General

Target

2024-07-28_ebc758f9d6755840fc3769db7ffc81a7_wannacry
Size

5.0MB
Sample

240728-n4n77awgpj
MD5

ebc758f9d6755840fc3769db7ffc81a7
SHA1

98b57aeeb76684a87b7830214cf2acf48828c161
SHA256

f8b6718f4c775c50ffa47c09209880a16292de70c142a34ea9cb5dde10e5a0f2
SHA512

d20f7236d59ce2d9bd365adb2d05145ff758a3836fa2b30fb0cd86c37373688a6fb94418382114cfdecc5e6421a3564868375fd0a0e499bca810eaa0c0db8d24
SSDEEP

49152:VnxQqMSPbcBVux+TSqTdX1HkQo6SAARdhnvxJM0HF:Z6qPoBMxcSUDk36SAEdhvxWaF

Score

10^/10

wannacry discovery ransomware worm

Malware Config

Targets

- Target
  
  2024-07-28_ebc758f9d6755840fc3769db7ffc81a7_wannacry
- Size
  
  5.0MB
- MD5
  
  ebc758f9d6755840fc3769db7ffc81a7
- SHA1
  
  98b57aeeb76684a87b7830214cf2acf48828c161
- SHA256
  
  f8b6718f4c775c50ffa47c09209880a16292de70c142a34ea9cb5dde10e5a0f2
- SHA512
  
  d20f7236d59ce2d9bd365adb2d05145ff758a3836fa2b30fb0cd86c37373688a6fb94418382114cfdecc5e6421a3564868375fd0a0e499bca810eaa0c0db8d24
- SSDEEP
  
  49152:VnxQqMSPbcBVux+TSqTdX1HkQo6SAARdhnvxJM0HF:Z6qPoBMxcSUDk36SAEdhvxWaF
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (2134) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm