Overview

overview

10

Static

static

3

2024-09-27...ry.exe

windows7-x64

10

2024-09-27...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-27_1a5860aaf8a416dceba4ab6a7ba15be5_wannacry

  • Size

    3.6MB

  • Sample

    240927-vbtersvbmh

  • MD5

    1a5860aaf8a416dceba4ab6a7ba15be5

  • SHA1

    0c2ad837dee0eee3aa40b88b2edc2e3a2a9594d4

  • SHA256

    8e3e4515e3d0bb5e09da96909f41db890e366b7a7e31343a9d4e809c45fe9adf

  • SHA512

    88058c76ea67b338b00b62051b3c6a15c3f6f9a5f51b5195d6b835643b2848efaa859f90ad04c921eb2a090666e9641673147db5d8e879631d27bfdf19fed80f

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0QeQjG/D8kAk+gdhA:2nAQqMSPbcBVQej/ogdh

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-27_1a5860aaf8a416dceba4ab6a7ba15be5_wannacry

    • Size

      3.6MB

    • MD5

      1a5860aaf8a416dceba4ab6a7ba15be5

    • SHA1

      0c2ad837dee0eee3aa40b88b2edc2e3a2a9594d4

    • SHA256

      8e3e4515e3d0bb5e09da96909f41db890e366b7a7e31343a9d4e809c45fe9adf

    • SHA512

      88058c76ea67b338b00b62051b3c6a15c3f6f9a5f51b5195d6b835643b2848efaa859f90ad04c921eb2a090666e9641673147db5d8e879631d27bfdf19fed80f

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0QeQjG/D8kAk+gdhA:2nAQqMSPbcBVQej/ogdh

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3339) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks