wannacry | 0ddfe514fb8fc1f583db27be85c703fd17ffe5b196a448ec50da063ee51d21b3 | Triage

Resubmissions

26-09-2024 23:42

240926-3qeh6atgpq 10

30-08-2024 18:53

240830-xjrl9azhpn 10

30-08-2024 15:42

240830-s5d6tssfmm 10

30-08-2024 15:38

240830-s27c7s1gld 10

Sharing

General

Target

cb211e0f58c5a58b0a035936c7d86952_JaffaCakes118
Size

5.0MB
Sample

240926-3qeh6atgpq
MD5

cb211e0f58c5a58b0a035936c7d86952
SHA1

e256814cd2179c95a750bd2968acec788a41c8ff
SHA256

0ddfe514fb8fc1f583db27be85c703fd17ffe5b196a448ec50da063ee51d21b3
SHA512

9436d9d128f0234b14b853515bc2e7aadac2d921a2ac0517617d39c978bc6fc39887c76494b88475f372e98e361e3c77a5418455142dec243b77220e92c58757
SSDEEP

98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5QMS1:TDqPe1Cxcxk3ZAEUad2

Score

10^/10

wannacry discovery ransomware worm

Malware Config

Targets

- Target
  
  cb211e0f58c5a58b0a035936c7d86952_JaffaCakes118
- Size
  
  5.0MB
- MD5
  
  cb211e0f58c5a58b0a035936c7d86952
- SHA1
  
  e256814cd2179c95a750bd2968acec788a41c8ff
- SHA256
  
  0ddfe514fb8fc1f583db27be85c703fd17ffe5b196a448ec50da063ee51d21b3
- SHA512
  
  9436d9d128f0234b14b853515bc2e7aadac2d921a2ac0517617d39c978bc6fc39887c76494b88475f372e98e361e3c77a5418455142dec243b77220e92c58757
- SSDEEP
  
  98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5QMS1:TDqPe1Cxcxk3ZAEUad2
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm