Overview

overview

10

Static

static

3

2024-09-08...ry.exe

windows7-x64

10

2024-09-08...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-08_04af56434d60ec8a17511ab957430c0a_wannacry

  • Size

    3.6MB

  • Sample

    240908-ng5awstapk

  • MD5

    04af56434d60ec8a17511ab957430c0a

  • SHA1

    9bf7e12145f6c080115730f2137ed1ae14096a89

  • SHA256

    11ce7e99472126df83ed848bed5a79bcf190ec0dbf16a7b31ee53e5b7a085cc8

  • SHA512

    348733bd8b439cb4825e1027bedc1566f760a3fcf2f7217fed964e08156bc93a85d150adc6d6b5d93e09fdd5253c0f08ccfb19db9cf4d198fb6309fc049d51bd

  • SSDEEP

    24576:VbLgdeJMSirYb8kQg6eX6SASkDhAdvpcLjdt/8uMEbI:VnjJMSPb8kQo6SAphwk3R

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-08_04af56434d60ec8a17511ab957430c0a_wannacry

    • Size

      3.6MB

    • MD5

      04af56434d60ec8a17511ab957430c0a

    • SHA1

      9bf7e12145f6c080115730f2137ed1ae14096a89

    • SHA256

      11ce7e99472126df83ed848bed5a79bcf190ec0dbf16a7b31ee53e5b7a085cc8

    • SHA512

      348733bd8b439cb4825e1027bedc1566f760a3fcf2f7217fed964e08156bc93a85d150adc6d6b5d93e09fdd5253c0f08ccfb19db9cf4d198fb6309fc049d51bd

    • SSDEEP

      24576:VbLgdeJMSirYb8kQg6eX6SASkDhAdvpcLjdt/8uMEbI:VnjJMSPb8kQo6SAphwk3R

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3305) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks