Overview

overview

10

Static

static

3

2024-08-21...ry.exe

windows7-x64

10

2024-08-21...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-21_85d92d485be05e909941bb490b46aabc_wannacry

  • Size

    5.0MB

  • Sample

    240821-jsv45sxdna

  • MD5

    85d92d485be05e909941bb490b46aabc

  • SHA1

    63a7f1389db34145caf912cf2ef73873c5a66f58

  • SHA256

    99ffa3f3e2912ab2127858cb203a9bd7e97efcb7038fdffd8996647e9b3920b1

  • SHA512

    352a2fe781bbeebe8c8fa5f3922f82687bb6e84a5f7b46e7bf21214bd05bb55f9ee38ae071f960de7224f61c224510dd66ffb1160ed6ac31c8b40d80b534d898

  • SSDEEP

    6144:GE9l9ynqIYVTH5DgSg8ajldktM0XXrP2QhMV9qbBLIwYQuy8DLq1eNVDvMr:GebLgPlu+QhMbaIMu7L5NVE

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-21_85d92d485be05e909941bb490b46aabc_wannacry

    • Size

      5.0MB

    • MD5

      85d92d485be05e909941bb490b46aabc

    • SHA1

      63a7f1389db34145caf912cf2ef73873c5a66f58

    • SHA256

      99ffa3f3e2912ab2127858cb203a9bd7e97efcb7038fdffd8996647e9b3920b1

    • SHA512

      352a2fe781bbeebe8c8fa5f3922f82687bb6e84a5f7b46e7bf21214bd05bb55f9ee38ae071f960de7224f61c224510dd66ffb1160ed6ac31c8b40d80b534d898

    • SSDEEP

      6144:GE9l9ynqIYVTH5DgSg8ajldktM0XXrP2QhMV9qbBLIwYQuy8DLq1eNVDvMr:GebLgPlu+QhMbaIMu7L5NVE

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3213) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks