Overview

overview

10

Static

static

3

2024-08-03...ry.exe

windows7-x64

10

2024-08-03...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-03_481dac02b962066fd4ce86fdd0a1cc6f_wannacry

  • Size

    5.0MB

  • Sample

    240803-p1d4gsybna

  • MD5

    481dac02b962066fd4ce86fdd0a1cc6f

  • SHA1

    e7219474685d81770d7f89ee072ed968db024bad

  • SHA256

    ddb7d6d6f81778cd3495173dc3d1e4d2f2a3d353078fc331430f96938f25892b

  • SHA512

    53bd01ba9a38879c4ecb3beb1b9e0e843b281ef7dc53250426e8fe360071482ad80c82d58acda4abbf4a6436b40bf6c8e25276599298f7aecf569953ea975fd0

  • SSDEEP

    98304:Z8qPoBhz1aRxcSUDk36SAEdhvp3R8yAVp2H:Z8qPe1Cxcxk3ZAE1R8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-03_481dac02b962066fd4ce86fdd0a1cc6f_wannacry

    • Size

      5.0MB

    • MD5

      481dac02b962066fd4ce86fdd0a1cc6f

    • SHA1

      e7219474685d81770d7f89ee072ed968db024bad

    • SHA256

      ddb7d6d6f81778cd3495173dc3d1e4d2f2a3d353078fc331430f96938f25892b

    • SHA512

      53bd01ba9a38879c4ecb3beb1b9e0e843b281ef7dc53250426e8fe360071482ad80c82d58acda4abbf4a6436b40bf6c8e25276599298f7aecf569953ea975fd0

    • SSDEEP

      98304:Z8qPoBhz1aRxcSUDk36SAEdhvp3R8yAVp2H:Z8qPe1Cxcxk3ZAE1R8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3166) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks