Overview

overview

10

Static

static

3

2024-08-13...ry.exe

windows7-x64

10

2024-08-13...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-13_d75026766e287faf8ee652a4da1440cc_wannacry

  • Size

    2.2MB

  • Sample

    240813-l5q23axdpf

  • MD5

    d75026766e287faf8ee652a4da1440cc

  • SHA1

    52a6cb85568a056dadd71423373463abb06e8e72

  • SHA256

    22c82a6da00b3a9736defe0b7200f17e924a898120ad699705f9ea1ad167ccdd

  • SHA512

    7a126776802b773e6ad061ae324f83b5497fdb845c7a2776dbb268ab987fbb43e539237d2c97e0d126d913e6a6fb5f6351bc57077d3adde64296a8378079a602

  • SSDEEP

    49152:QnnMSPbcBVQej/1INRx+TSqTdXr6SAARdhnvw:QnPoBhz1aRxcSUN6SAEdhvw

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-13_d75026766e287faf8ee652a4da1440cc_wannacry

    • Size

      2.2MB

    • MD5

      d75026766e287faf8ee652a4da1440cc

    • SHA1

      52a6cb85568a056dadd71423373463abb06e8e72

    • SHA256

      22c82a6da00b3a9736defe0b7200f17e924a898120ad699705f9ea1ad167ccdd

    • SHA512

      7a126776802b773e6ad061ae324f83b5497fdb845c7a2776dbb268ab987fbb43e539237d2c97e0d126d913e6a6fb5f6351bc57077d3adde64296a8378079a602

    • SSDEEP

      49152:QnnMSPbcBVQej/1INRx+TSqTdXr6SAARdhnvw:QnPoBhz1aRxcSUN6SAEdhvw

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3307) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks