Overview

overview

10

Static

static

3

2024-08-28...ry.exe

windows7-x64

10

2024-08-28...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-28_bbe97965235eb31bbb8404c18ed7b496_wannacry

  • Size

    5.0MB

  • Sample

    240828-endl3sthpb

  • MD5

    bbe97965235eb31bbb8404c18ed7b496

  • SHA1

    e1b53385748ef80ae961892403196fd61e57b68c

  • SHA256

    6cc8c5a5867561668f6ba3b95cc02a7b2fc750294f768ee283b3acac3cbef7f1

  • SHA512

    2e462a8dc8929a889265750da53f184df6ab42b2a00ff0c1a420089e049d9fe55eb2c59100883a28b93387a8e44495eb7cf1a44373c00643c6627e72d15c69f0

  • SSDEEP

    24576:4bLgudQhfdmMSirYbcMNgef04GWfQg6OW:4nNQqMSPbcBVzWfQoW

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-28_bbe97965235eb31bbb8404c18ed7b496_wannacry

    • Size

      5.0MB

    • MD5

      bbe97965235eb31bbb8404c18ed7b496

    • SHA1

      e1b53385748ef80ae961892403196fd61e57b68c

    • SHA256

      6cc8c5a5867561668f6ba3b95cc02a7b2fc750294f768ee283b3acac3cbef7f1

    • SHA512

      2e462a8dc8929a889265750da53f184df6ab42b2a00ff0c1a420089e049d9fe55eb2c59100883a28b93387a8e44495eb7cf1a44373c00643c6627e72d15c69f0

    • SSDEEP

      24576:4bLgudQhfdmMSirYbcMNgef04GWfQg6OW:4nNQqMSPbcBVzWfQoW

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3280) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks