Overview

overview

10

Static

static

3

2024-09-27...ry.exe

windows7-x64

10

2024-09-27...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-27_6846015f28067c1522c758737fe1a2eb_wannacry

  • Size

    2.2MB

  • Sample

    240927-rwzwhazblc

  • MD5

    6846015f28067c1522c758737fe1a2eb

  • SHA1

    ca39fe748c2b0cf0a05133b9a77f1cfff7ba9c38

  • SHA256

    018cb669bfab40b0c0b26bd774d0a6a5698b23941517a7515fe14a52af70c5c5

  • SHA512

    f2e6d9143c3bae34badf70d9a74d2b3c2977d979bff2a7d5dbd3a6933d33871dfc3ad0f502c0dc716ac082653848067b6f430816746b41ff4da77c99032be847

  • SSDEEP

    49152:QnpEKUacBVQejJx+TSqTdX1HkQo6SAARdhnvn:QpyfBhNxcSUDk36SAEdhvn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-27_6846015f28067c1522c758737fe1a2eb_wannacry

    • Size

      2.2MB

    • MD5

      6846015f28067c1522c758737fe1a2eb

    • SHA1

      ca39fe748c2b0cf0a05133b9a77f1cfff7ba9c38

    • SHA256

      018cb669bfab40b0c0b26bd774d0a6a5698b23941517a7515fe14a52af70c5c5

    • SHA512

      f2e6d9143c3bae34badf70d9a74d2b3c2977d979bff2a7d5dbd3a6933d33871dfc3ad0f502c0dc716ac082653848067b6f430816746b41ff4da77c99032be847

    • SSDEEP

      49152:QnpEKUacBVQejJx+TSqTdX1HkQo6SAARdhnvn:QpyfBhNxcSUDk36SAEdhvn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3215) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks