Overview

overview

10

Static

static

3

2024-08-18...ry.exe

windows7-x64

10

2024-08-18...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-18_77abd528f8b42d7af37582450d508bbd_wannacry

  • Size

    3.6MB

  • Sample

    240818-fl4adszbkp

  • MD5

    77abd528f8b42d7af37582450d508bbd

  • SHA1

    4c8aee6d8a8420d06fb243ebe345a5bebfdbc550

  • SHA256

    0b3ca341ddbd0738897f19f85a6881c5edb04cb78f5eedfa23f78459bd6352db

  • SHA512

    eac563d6015bf9f9795409853bf3d8bff5e0ad7279136c2235dc1490cdec1a6a730b72b3bfaa4cbfbaed8c7de3d586867138cd6ad27dfa8ec3ee0db75f8f1af5

  • SSDEEP

    98304:XDqPoBz7aRxcSUDk36SAEdhvxWa9P593R8yAVp2HY:XDqPGCxcxk3ZAEUadzR8yc4HY

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-18_77abd528f8b42d7af37582450d508bbd_wannacry

    • Size

      3.6MB

    • MD5

      77abd528f8b42d7af37582450d508bbd

    • SHA1

      4c8aee6d8a8420d06fb243ebe345a5bebfdbc550

    • SHA256

      0b3ca341ddbd0738897f19f85a6881c5edb04cb78f5eedfa23f78459bd6352db

    • SHA512

      eac563d6015bf9f9795409853bf3d8bff5e0ad7279136c2235dc1490cdec1a6a730b72b3bfaa4cbfbaed8c7de3d586867138cd6ad27dfa8ec3ee0db75f8f1af5

    • SSDEEP

      98304:XDqPoBz7aRxcSUDk36SAEdhvxWa9P593R8yAVp2HY:XDqPGCxcxk3ZAEUadzR8yc4HY

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3213) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks