wannacry | 2304576818339c90350601765b4ffd89b5b8db4e1e679f99ab9cf4526ca56872 | Triage

Sharing

General

Target

df62dc33b1c1411eb820d20e11d89a21_JaffaCakes118
Size

3.4MB
Sample

240914-drf1yavdla
MD5

df62dc33b1c1411eb820d20e11d89a21
SHA1

0e0fcffe7d97ea29ae3ba9486430e40321366549
SHA256

2304576818339c90350601765b4ffd89b5b8db4e1e679f99ab9cf4526ca56872
SHA512

16a9f98683aca2f30ed60a18b569bff95adb96f88f4b98c799ce78200512321251a9e4c84cdec2215549da038560fc3a0a2e66ba78ae1fe99844c936e3bfdcc6
SSDEEP

49152:nQqMSPbcBVQej/1INRV6SAARdhnvxJM0H9PAMEcaEau3Q3x:QqPoBhz1aRV6SAEdhvxWa9P593Q3x

Score

10^/10

wannacry defense_evasion discovery ransomware worm

Malware Config

Targets

- Target
  
  df62dc33b1c1411eb820d20e11d89a21_JaffaCakes118
- Size
  
  3.4MB
- MD5
  
  df62dc33b1c1411eb820d20e11d89a21
- SHA1
  
  0e0fcffe7d97ea29ae3ba9486430e40321366549
- SHA256
  
  2304576818339c90350601765b4ffd89b5b8db4e1e679f99ab9cf4526ca56872
- SHA512
  
  16a9f98683aca2f30ed60a18b569bff95adb96f88f4b98c799ce78200512321251a9e4c84cdec2215549da038560fc3a0a2e66ba78ae1fe99844c936e3bfdcc6
- SSDEEP
  
  49152:nQqMSPbcBVQej/1INRV6SAARdhnvxJM0H9PAMEcaEau3Q3x:QqPoBhz1aRV6SAEdhvxWa9P593Q3x
Score

10^/10

wannacry defense_evasion discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Modifies file permissions
  discovery
- File and Directory Permissions Modification: Windows File and Directory Permissions Modification
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Windows File and Directory Permissions Modification

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydefense_evasiondiscoveryransomwareworm

behavioral2

wannacrydefense_evasiondiscoveryransomwareworm