wannacry | c99e03c5168c25779aef710daf2a90297cc92d8a1a9e68338e39a1534fc03477 | Triage

Resubmissions

24-09-2024 02:40

240924-c5zvjasfkk 10

23-09-2024 23:22

240923-3chzesvdla 10

Sharing

General

Target

2024-09-23_46b8d560dee5cd5fd46ba9abbe06f2d4_wannacry
Size

2.2MB
Sample

240924-c5zvjasfkk
MD5

46b8d560dee5cd5fd46ba9abbe06f2d4
SHA1

836b82cf7f134b1e9d52953cb225df0bcea23c36
SHA256

c99e03c5168c25779aef710daf2a90297cc92d8a1a9e68338e39a1534fc03477
SHA512

14449382b2b6f3664285fd408ad544d8d3385b690ed01db926cd04cca7ea226081132877dc09f4827d835e1364e1b4f799c53cdde1674db6095241335fd74562
SSDEEP

12288:e1bLgPluxQhMbaIMu7L5NVErCA46Uy7ckPU82900Ve7zw+K+DH:QbLgdeQhfdmMS6UacMNgef0Q

Score

10^/10

wannacry discovery ransomware worm

Malware Config

Targets

- Target
  
  2024-09-23_46b8d560dee5cd5fd46ba9abbe06f2d4_wannacry
- Size
  
  2.2MB
- MD5
  
  46b8d560dee5cd5fd46ba9abbe06f2d4
- SHA1
  
  836b82cf7f134b1e9d52953cb225df0bcea23c36
- SHA256
  
  c99e03c5168c25779aef710daf2a90297cc92d8a1a9e68338e39a1534fc03477
- SHA512
  
  14449382b2b6f3664285fd408ad544d8d3385b690ed01db926cd04cca7ea226081132877dc09f4827d835e1364e1b4f799c53cdde1674db6095241335fd74562
- SSDEEP
  
  12288:e1bLgPluxQhMbaIMu7L5NVErCA46Uy7ckPU82900Ve7zw+K+DH:QbLgdeQhfdmMS6UacMNgef0Q
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (682) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm