Overview

overview

10

Static

static

3

2024-09-27...ry.exe

windows7-x64

10

2024-09-27...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-27_72b6bafdd609c3b34aa269b31c3599c5_wannacry

  • Size

    3.6MB

  • Sample

    240927-vqej6avdrc

  • MD5

    72b6bafdd609c3b34aa269b31c3599c5

  • SHA1

    093c0fa8cbfe390d95af45734c36a9c1997756d9

  • SHA256

    54c2217a8c6c215e200511c9282616c0aecbd1fef6d86cdb9b9c748a29c068ad

  • SHA512

    e9a001cc60c3aad9b5a82820c2f32dd54ce55f3daa261410a1fcdc19ce7a961f1482b2e7c099cb6ff10de5877e614f5d4e3622cdb00d261d92c968a06e45847f

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef001LJMfcH9:2nAQqMSPbcBV0xJM0H9

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-27_72b6bafdd609c3b34aa269b31c3599c5_wannacry

    • Size

      3.6MB

    • MD5

      72b6bafdd609c3b34aa269b31c3599c5

    • SHA1

      093c0fa8cbfe390d95af45734c36a9c1997756d9

    • SHA256

      54c2217a8c6c215e200511c9282616c0aecbd1fef6d86cdb9b9c748a29c068ad

    • SHA512

      e9a001cc60c3aad9b5a82820c2f32dd54ce55f3daa261410a1fcdc19ce7a961f1482b2e7c099cb6ff10de5877e614f5d4e3622cdb00d261d92c968a06e45847f

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef001LJMfcH9:2nAQqMSPbcBV0xJM0H9

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3223) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks