Overview

overview

10

Static

static

3

2024-08-01...ry.exe

windows7-x64

10

2024-08-01...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-01_18f04c8392ddb9966c1ab66521d2bddc_wannacry

  • Size

    3.6MB

  • Sample

    240801-ldly2axgph

  • MD5

    18f04c8392ddb9966c1ab66521d2bddc

  • SHA1

    20c94935d4caebb68d52e5c3a2b85081f8f7e12a

  • SHA256

    42417c342af0532fd134caf83af88dddb11ee97fdec4089b473d0e6f25214311

  • SHA512

    73a6f04cf4e08cd22e3ec54ce43138f9449b0fb630d37c8545b63d8633c8a33787fe385047654c3e92d96767bb3c00b56b1c789939c81e61e1e3df868d49b447

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P59Uc/:yDqPe1Cxcxk3ZAEUadv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-01_18f04c8392ddb9966c1ab66521d2bddc_wannacry

    • Size

      3.6MB

    • MD5

      18f04c8392ddb9966c1ab66521d2bddc

    • SHA1

      20c94935d4caebb68d52e5c3a2b85081f8f7e12a

    • SHA256

      42417c342af0532fd134caf83af88dddb11ee97fdec4089b473d0e6f25214311

    • SHA512

      73a6f04cf4e08cd22e3ec54ce43138f9449b0fb630d37c8545b63d8633c8a33787fe385047654c3e92d96767bb3c00b56b1c789939c81e61e1e3df868d49b447

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P59Uc/:yDqPe1Cxcxk3ZAEUadv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3211) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks