Overview

overview

10

Static

static

3

2024-09-18...ry.exe

windows7-x64

10

2024-09-18...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-18_89620df172874d59012e08b143bdc33c_wannacry

  • Size

    2.2MB

  • Sample

    240918-jbp7kayhld

  • MD5

    89620df172874d59012e08b143bdc33c

  • SHA1

    23df51e1c98ed0b1c0b850b71eb765adc8f30c25

  • SHA256

    2fce6704bfd3e8ec31fdf5ff69088c5f5b994330d296c6a30c01ec7204cf1c90

  • SHA512

    53e19f05c4a59c81335e4455b1328814e0b9f1591774d0f0cc2b844a1ea85e1fda3eccdd98733e1f3bd1842a94e391842317f5cc67357f69c2a79fe7a8e72962

  • SSDEEP

    49152:QnpEhPbcBVQej/1INRx+TSqTdX1HkQo6SAARdAqGi:QpOoBhz1aRxcSUDk36SAEdAHi

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-18_89620df172874d59012e08b143bdc33c_wannacry

    • Size

      2.2MB

    • MD5

      89620df172874d59012e08b143bdc33c

    • SHA1

      23df51e1c98ed0b1c0b850b71eb765adc8f30c25

    • SHA256

      2fce6704bfd3e8ec31fdf5ff69088c5f5b994330d296c6a30c01ec7204cf1c90

    • SHA512

      53e19f05c4a59c81335e4455b1328814e0b9f1591774d0f0cc2b844a1ea85e1fda3eccdd98733e1f3bd1842a94e391842317f5cc67357f69c2a79fe7a8e72962

    • SSDEEP

      49152:QnpEhPbcBVQej/1INRx+TSqTdX1HkQo6SAARdAqGi:QpOoBhz1aRxcSUDk36SAEdAHi

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3217) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks