wannacry | 3214a6bc1516237a1dd43a7362e4c5d8a48528aeadd8151eae8e9030fd98f273 | Triage

Resubmissions

01-09-2024 15:27

240901-sv2jdavbrq 10

28-08-2024 14:14

240828-rkcltstbkp 10

28-08-2024 13:53

240828-q7akba1anh 10

28-08-2024 13:48

240828-q3313asdkq 10

Sharing

General

Target

c6f93103b29652dbe18510ea58016058_JaffaCakes118
Size

5.0MB
Sample

240828-rkcltstbkp
MD5

c6f93103b29652dbe18510ea58016058
SHA1

99f707cdd51c938b85b43413d982325919f18cd1
SHA256

3214a6bc1516237a1dd43a7362e4c5d8a48528aeadd8151eae8e9030fd98f273
SHA512

4a243ef4bf2ae2b01030c00f576c4c83a378f280e03f356c7298d5eaa41720722616da5dd7e4466b572158e658a01b92e09ff245b9c218949945e061bb40980d
SSDEEP

49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM:+DqPoBhz1aRxcSUDk36SAEdhvxW

Score

10^/10

wannacry android discovery evasion linux macos ransomware worm

Malware Config

Targets

- Target
  
  c6f93103b29652dbe18510ea58016058_JaffaCakes118
- Size
  
  5.0MB
- MD5
  
  c6f93103b29652dbe18510ea58016058
- SHA1
  
  99f707cdd51c938b85b43413d982325919f18cd1
- SHA256
  
  3214a6bc1516237a1dd43a7362e4c5d8a48528aeadd8151eae8e9030fd98f273
- SHA512
  
  4a243ef4bf2ae2b01030c00f576c4c83a378f280e03f356c7298d5eaa41720722616da5dd7e4466b572158e658a01b92e09ff245b9c218949945e061bb40980d
- SSDEEP
  
  49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM:+DqPoBhz1aRxcSUDk36SAEdhvxW
Score

10^/10

wannacry discovery ransomware worm evasion
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (694) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral10 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10