Overview

overview

10

Static

static

3

2024-08-14...ry.exe

windows7-x64

10

2024-08-14...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-14_99a67993cdb1f90f586a9a6e2a0b3ff3_wannacry

  • Size

    5.0MB

  • Sample

    240814-khvajasend

  • MD5

    99a67993cdb1f90f586a9a6e2a0b3ff3

  • SHA1

    b852172100a660d06c85a5c043c94576c817cdfc

  • SHA256

    ccc199e91b2cae007c8d1f0cfd66ad0be79f1bffd2f5bddd48410770cf9b4377

  • SHA512

    fa0ba5b8031810429cd2245a480279d3feaf0252b5b1961f640908c78721d626fb5f11305392fbcb98438a621622bb9e41dc1c4d5b7acd02b5744216711f895f

  • SSDEEP

    98304:D8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8s3:D8qPe1Cxcxk3ZAEUadzR8s

Score
10/10
wannacrydefense_evasiondiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-14_99a67993cdb1f90f586a9a6e2a0b3ff3_wannacry

    • Size

      5.0MB

    • MD5

      99a67993cdb1f90f586a9a6e2a0b3ff3

    • SHA1

      b852172100a660d06c85a5c043c94576c817cdfc

    • SHA256

      ccc199e91b2cae007c8d1f0cfd66ad0be79f1bffd2f5bddd48410770cf9b4377

    • SHA512

      fa0ba5b8031810429cd2245a480279d3feaf0252b5b1961f640908c78721d626fb5f11305392fbcb98438a621622bb9e41dc1c4d5b7acd02b5744216711f895f

    • SSDEEP

      98304:D8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8s3:D8qPe1Cxcxk3ZAEUadzR8s

    Score
    10/10
    wannacrydefense_evasiondiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3252) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Modifies file permissions

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • File and Directory Permissions Modification: Windows File and Directory Permissions Modification

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks