Overview

overview

10

Static

static

3

2023-05-08...ry.exe

windows7-x64

Resubmissions

22-08-2024 18:39

240822-xamxpsvarj 10

09-05-2023 03:14

230509-drczaafh6w 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2023-05-08_8a016c4ee71532f20b892bb35eb954f4_wannacry.exe

  • Size

    6.4MB

  • Sample

    240822-xamxpsvarj

  • MD5

    8a016c4ee71532f20b892bb35eb954f4

  • SHA1

    204c97ab720d12e6fa04cd8bea6da019c1d4317e

  • SHA256

    ce2194c96ebab334f8484a7a3e45e2c3bb74296fc5eddd335abf3f5c65f34967

  • SHA512

    a0ecffce2b724287e8ab01d23d95839d7e522bc27dc14be26b5089bf8704a46c176a87f02648f6ba646938217afb1b33c6e6557ff3dce528497d9b321310c9bd

  • SSDEEP

    6144:YE9l9yKqIYVTH5DgSg8ajldktM0XXrV2QhMV9qb:YJbLgPluwQhMb

Score
10/10
wannacrydefense_evasiondiscoveryransomwareworm

Malware Config

Targets

    • Target

      2023-05-08_8a016c4ee71532f20b892bb35eb954f4_wannacry.exe

    • Size

      6.4MB

    • MD5

      8a016c4ee71532f20b892bb35eb954f4

    • SHA1

      204c97ab720d12e6fa04cd8bea6da019c1d4317e

    • SHA256

      ce2194c96ebab334f8484a7a3e45e2c3bb74296fc5eddd335abf3f5c65f34967

    • SHA512

      a0ecffce2b724287e8ab01d23d95839d7e522bc27dc14be26b5089bf8704a46c176a87f02648f6ba646938217afb1b33c6e6557ff3dce528497d9b321310c9bd

    • SSDEEP

      6144:YE9l9yKqIYVTH5DgSg8ajldktM0XXrV2QhMV9qb:YJbLgPluwQhMb

    Score
    10/10
    wannacrydefense_evasiondiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • File and Directory Permissions Modification: Windows File and Directory Permissions Modification

      defense_evasion

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks