Overview

overview

10

Static

static

3

2024-09-27...ry.exe

windows7-x64

10

2024-09-27...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-27_dcfa2d9692a946088fd4020314f51e9d_wannacry

  • Size

    2.2MB

  • Sample

    240927-v5fe1avgmg

  • MD5

    dcfa2d9692a946088fd4020314f51e9d

  • SHA1

    2f35b64a0290ce637d8d69e805cfafeb033eca60

  • SHA256

    1dda7db0c3bc58f1a2bc67b31cb95ad891efe4eef5c6847269cbaea1142280b4

  • SHA512

    707920b2148f3857605bfc66457c9fb912fd6282ebb1c640f069e0944a3e720ee4606097bae7dce8a10b3d6d383c452d077a3ce6151fc535ac62d7318253a78f

  • SSDEEP

    49152:QnOQej31sNRx+TSqTdX1HkQo6SAARdhnvn:QKT1+RxcSUDk36SAEdhvn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-27_dcfa2d9692a946088fd4020314f51e9d_wannacry

    • Size

      2.2MB

    • MD5

      dcfa2d9692a946088fd4020314f51e9d

    • SHA1

      2f35b64a0290ce637d8d69e805cfafeb033eca60

    • SHA256

      1dda7db0c3bc58f1a2bc67b31cb95ad891efe4eef5c6847269cbaea1142280b4

    • SHA512

      707920b2148f3857605bfc66457c9fb912fd6282ebb1c640f069e0944a3e720ee4606097bae7dce8a10b3d6d383c452d077a3ce6151fc535ac62d7318253a78f

    • SSDEEP

      49152:QnOQej31sNRx+TSqTdX1HkQo6SAARdhnvn:QKT1+RxcSUDk36SAEdhvn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3022) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks