Overview

overview

10

Static

static

3

2024-09-25...ry.exe

windows7-x64

10

2024-09-25...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-25_5de0d1d5732356b3389c88d2b6f7f355_wannacry

  • Size

    5.0MB

  • Sample

    240925-lvwjsssamf

  • MD5

    5de0d1d5732356b3389c88d2b6f7f355

  • SHA1

    14dd707a7823247319d638bfacef5a0f5ebfe2db

  • SHA256

    adc924dbf5e09a5dac1e2665c6f18ce2ecc1a102fe66f6797b07c93e625cbeda

  • SHA512

    5266a1ee329509c4ec5bb4cb65d6faf0b81e934e589cc89d6ed7579340cbe0b4e63a3284c5f46a21f21e3c2a65d1a3bfd902e91aa5f7ed5c2e1cc2175a714207

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9ib2H:yDqPe1Cxcxk3ZAEUa4iH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-25_5de0d1d5732356b3389c88d2b6f7f355_wannacry

    • Size

      5.0MB

    • MD5

      5de0d1d5732356b3389c88d2b6f7f355

    • SHA1

      14dd707a7823247319d638bfacef5a0f5ebfe2db

    • SHA256

      adc924dbf5e09a5dac1e2665c6f18ce2ecc1a102fe66f6797b07c93e625cbeda

    • SHA512

      5266a1ee329509c4ec5bb4cb65d6faf0b81e934e589cc89d6ed7579340cbe0b4e63a3284c5f46a21f21e3c2a65d1a3bfd902e91aa5f7ed5c2e1cc2175a714207

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9ib2H:yDqPe1Cxcxk3ZAEUa4iH

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3275) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks