wannacry | 2a94ebb590d7d9ccdd2009a50ab13d94fb3174536e91dfe53dd9cea3e741e7d4 | Triage

Resubmissions

12-09-2024 17:42

240912-v9zdnswckn 10

06-09-2024 22:01

240906-1w8m3szgmb 10

06-09-2024 21:12

240906-z2d5zsyajl 10

Sharing

General

Target

d0766eba566a497af6e61c07af24c36d_JaffaCakes118
Size

5.0MB
Sample

240906-1w8m3szgmb
MD5

d0766eba566a497af6e61c07af24c36d
SHA1

4f808f55880494d962c57f9974278fad4b3008f5
SHA256

2a94ebb590d7d9ccdd2009a50ab13d94fb3174536e91dfe53dd9cea3e741e7d4
SHA512

907c11535d4d4b64c042ee78a74b619b157958e790531bc22057d6b9f0ee40720c6a9a45f7305b85b56563bc32ca7f37a2e4a806aaf5e278e8b09b41c51c5e2b
SSDEEP

98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9Pa3R8yAVp2:TDqPe1Cxcxk3ZAEUadER8yc4

Score

10^/10

wannacry discovery execution ransomware worm

Malware Config

Targets

- Target
  
  d0766eba566a497af6e61c07af24c36d_JaffaCakes118
- Size
  
  5.0MB
- MD5
  
  d0766eba566a497af6e61c07af24c36d
- SHA1
  
  4f808f55880494d962c57f9974278fad4b3008f5
- SHA256
  
  2a94ebb590d7d9ccdd2009a50ab13d94fb3174536e91dfe53dd9cea3e741e7d4
- SHA512
  
  907c11535d4d4b64c042ee78a74b619b157958e790531bc22057d6b9f0ee40720c6a9a45f7305b85b56563bc32ca7f37a2e4a806aaf5e278e8b09b41c51c5e2b
- SSDEEP
  
  98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9Pa3R8yAVp2:TDqPe1Cxcxk3ZAEUadER8yc4
Score

10^/10

wannacry discovery execution ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Executes dropped EXE
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryexecutionransomwareworm