Overview

overview

10

Static

static

3

20240915c2...ry.exe

windows7-x64

10

20240915c2...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20240915c2518e860b9fe614dd7a0d4ebaf1eda2wannacry

  • Size

    5.0MB

  • Sample

    240915-qgzfrawcpn

  • MD5

    c2518e860b9fe614dd7a0d4ebaf1eda2

  • SHA1

    d9be161a6fb4b79f10ceafe30109a2599dbf75d0

  • SHA256

    c2d6eb0a76b139b02342c1d5d75c1b744afef9052777425800bc90d1462b4f47

  • SHA512

    042ab2d148e9c08bfa21e79698229ad1e609d6a9c27873dff91d03b1c8b091d56f4baa715489bd9212abc7e530fc7e12d1924fa75744abca4085c36e789bbd5f

  • SSDEEP

    49152:XnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:XDqPoBhz1aRxcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      20240915c2518e860b9fe614dd7a0d4ebaf1eda2wannacry

    • Size

      5.0MB

    • MD5

      c2518e860b9fe614dd7a0d4ebaf1eda2

    • SHA1

      d9be161a6fb4b79f10ceafe30109a2599dbf75d0

    • SHA256

      c2d6eb0a76b139b02342c1d5d75c1b744afef9052777425800bc90d1462b4f47

    • SHA512

      042ab2d148e9c08bfa21e79698229ad1e609d6a9c27873dff91d03b1c8b091d56f4baa715489bd9212abc7e530fc7e12d1924fa75744abca4085c36e789bbd5f

    • SSDEEP

      49152:XnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:XDqPoBhz1aRxcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3147) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks