Overview

overview

10

Static

static

3

2024-09-27...ry.exe

windows7-x64

10

2024-09-27...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-27_6c451c97435add16490e2cf87b95b182_wannacry

  • Size

    3.6MB

  • Sample

    240927-vpsqdssdll

  • MD5

    6c451c97435add16490e2cf87b95b182

  • SHA1

    6924cef359a76f5a0be3df988d105556388b0672

  • SHA256

    f549063e1c47466a04b358e90c4a219079022539b3d65c4f796c8474e831994b

  • SHA512

    53f6f1b47d963414468d8bae351ed2bc813bed09b658671f8854c3302f6f88962ca36884ea3acdb09d06ede6c7757a054b1edc392097288de0995cd148659d5e

  • SSDEEP

    98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yA:Z8qPe1Cxcxk3ZAEUadzR8y

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-27_6c451c97435add16490e2cf87b95b182_wannacry

    • Size

      3.6MB

    • MD5

      6c451c97435add16490e2cf87b95b182

    • SHA1

      6924cef359a76f5a0be3df988d105556388b0672

    • SHA256

      f549063e1c47466a04b358e90c4a219079022539b3d65c4f796c8474e831994b

    • SHA512

      53f6f1b47d963414468d8bae351ed2bc813bed09b658671f8854c3302f6f88962ca36884ea3acdb09d06ede6c7757a054b1edc392097288de0995cd148659d5e

    • SSDEEP

      98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yA:Z8qPe1Cxcxk3ZAEUadzR8y

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3367) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks