Overview

overview

10

Static

static

3

2024-08-02...ry.exe

windows7-x64

10

2024-08-02...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-02_3c53b840fbf1deb8feb0a79b54dd11a9_wannacry

  • Size

    5.0MB

  • Sample

    240802-llfrzsygma

  • MD5

    3c53b840fbf1deb8feb0a79b54dd11a9

  • SHA1

    ae5cfa224986e5c311e3bc3373ca31ad092345ea

  • SHA256

    dcbe3bdf580d7acc7252e9fe43d4ee78ad48a8be9ef737b56e43127b808b0fb1

  • SHA512

    36ea4b8d8119c87aaf8e14d29a8404c6f049a445377baa9f96d31ae1ce9f6ca525efda85ab223a595439f746768c15fee2f52984e2c0e991b014f076f47915d2

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0QeQjGjv+PYvT1E6xHjBtkch6bmy3ZH7GlXHQePfh:2nAQqMSPbcBVQejjT7zJU66bI3C06

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-02_3c53b840fbf1deb8feb0a79b54dd11a9_wannacry

    • Size

      5.0MB

    • MD5

      3c53b840fbf1deb8feb0a79b54dd11a9

    • SHA1

      ae5cfa224986e5c311e3bc3373ca31ad092345ea

    • SHA256

      dcbe3bdf580d7acc7252e9fe43d4ee78ad48a8be9ef737b56e43127b808b0fb1

    • SHA512

      36ea4b8d8119c87aaf8e14d29a8404c6f049a445377baa9f96d31ae1ce9f6ca525efda85ab223a595439f746768c15fee2f52984e2c0e991b014f076f47915d2

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0QeQjGjv+PYvT1E6xHjBtkch6bmy3ZH7GlXHQePfh:2nAQqMSPbcBVQejjT7zJU66bI3C06

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3157) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks