Overview

overview

10

Static

static

3

2024-09-27...ry.exe

windows7-x64

10

2024-09-27...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-27_83ee3cd01dfdd749d316fd004aa55122_wannacry

  • Size

    3.6MB

  • Sample

    240927-vth2ravenf

  • MD5

    83ee3cd01dfdd749d316fd004aa55122

  • SHA1

    38c5f3fe0e22917ae661064521a015c6e30b9988

  • SHA256

    1274d5d4bf8854db5a7b501e3485c643e2d3a1878ab43e9aa87b24449255cd9f

  • SHA512

    f7caf06285c5537442a12025e1d3928146ddc941a8ad0ed5a912e0ddfd4d1e02c44837a424a8d866b268ee34dab6aecfb27f17097afc8c727c89e98356a14568

  • SSDEEP

    12288:GebLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHeQYSUjEXFO:XbLgddQhfdmMSirYbcMNgef0QeQjG

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-27_83ee3cd01dfdd749d316fd004aa55122_wannacry

    • Size

      3.6MB

    • MD5

      83ee3cd01dfdd749d316fd004aa55122

    • SHA1

      38c5f3fe0e22917ae661064521a015c6e30b9988

    • SHA256

      1274d5d4bf8854db5a7b501e3485c643e2d3a1878ab43e9aa87b24449255cd9f

    • SHA512

      f7caf06285c5537442a12025e1d3928146ddc941a8ad0ed5a912e0ddfd4d1e02c44837a424a8d866b268ee34dab6aecfb27f17097afc8c727c89e98356a14568

    • SSDEEP

      12288:GebLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHeQYSUjEXFO:XbLgddQhfdmMSirYbcMNgef0QeQjG

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3290) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks