Resubmissions

03-08-2024 09:22

240803-lb278sygmp 10

03-08-2024 09:16

240803-k8x44stenh 10

General

  • Target

    2024-08-03_deb24d34e3b6f271369605c8c0e734a0_wannacry

  • Size

    5.0MB

  • Sample

    240803-lb278sygmp

  • MD5

    deb24d34e3b6f271369605c8c0e734a0

  • SHA1

    3ca024882307e131d554221972e8dcf80879608a

  • SHA256

    e72193fe924b374245e1588110df8b95b5db7adb8a360932ff9741b108d50cc4

  • SHA512

    e0ade5414431536a40db5c3fec6990db8e94cf2f6bc8d9558619b10ac704662ad6c9426b70ca6613ab0f408612b79c402cfe6d82a8b6db13b033d8401e91541a

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P5h3R8yAVp2H:yDqPe1Cxcxk3ZAEUadvR8yc4H

Malware Config

Targets

    • Target

      2024-08-03_deb24d34e3b6f271369605c8c0e734a0_wannacry

    • Size

      5.0MB

    • MD5

      deb24d34e3b6f271369605c8c0e734a0

    • SHA1

      3ca024882307e131d554221972e8dcf80879608a

    • SHA256

      e72193fe924b374245e1588110df8b95b5db7adb8a360932ff9741b108d50cc4

    • SHA512

      e0ade5414431536a40db5c3fec6990db8e94cf2f6bc8d9558619b10ac704662ad6c9426b70ca6613ab0f408612b79c402cfe6d82a8b6db13b033d8401e91541a

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P5h3R8yAVp2H:yDqPe1Cxcxk3ZAEUadvR8yc4H

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (878) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks