General

  • Target
    2024-09-16_6bd48b0bea8b99d88a97486351dff2e5_wannacry
  • Size 5.0MB
  • Sample240916-tk427axaml
  • SHA256 12683643eb17733a7ca655f06db78388ea84a502c690173349bf6cc3c95bd291
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      2024-09-16_6bd48b0bea8b99d88a97486351dff2e5_wannacry
    • Size 5.0MB
    • SHA256 12683643eb17733a7ca655f06db78388ea84a502c690173349bf6cc3c95bd291
    • MD5 SHA1 SHA512 SSDEEP
    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3236) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks