wannacry | 3cbe9a3743d3676534d64c404f8897577614916cec0d92b02282370893c6ccd9 | Triage

Submit
Reports

Overview

overview

Static

static

3

2024092705...ry.exe

windows7-x64

2024092705...ry.exe

windows10-2004-x64

Sharing

General

Target

2024092705399a7aa35b59b9f270612df1183e39wannacry
Size

2.2MB
Sample

240927-wad45ashnm
MD5

05399a7aa35b59b9f270612df1183e39
SHA1

cead102cfca4ef935d6888f1763a59cc31a1e7c1
SHA256

3cbe9a3743d3676534d64c404f8897577614916cec0d92b02282370893c6ccd9
SHA512

e35afa75102ab6f765fe5faa57763bf9cf38241ed3f7eb6c046ec65a237ceecb229ed68e18d1e97b661c5c3922914407f4a7aa582cc01605f3d731ace32105bc
SSDEEP

24576:QbLgurgQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626:QnsQqMSPbcBVQej/1INR

Score

10^/10

wannacry discovery ransomware worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2024092705399a7aa35b59b9f270612df1183e39wannacry.exe

Resource

win7-20240903-en

wannacry discovery ransomware worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024092705399a7aa35b59b9f270612df1183e39wannacry.exe

Resource

win10v2004-20240802-en

wannacry discovery ransomware worm

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024092705399a7aa35b59b9f270612df1183e39wannacry
- Size
  
  2.2MB
- MD5
  
  05399a7aa35b59b9f270612df1183e39
- SHA1
  
  cead102cfca4ef935d6888f1763a59cc31a1e7c1
- SHA256
  
  3cbe9a3743d3676534d64c404f8897577614916cec0d92b02282370893c6ccd9
- SHA512
  
  e35afa75102ab6f765fe5faa57763bf9cf38241ed3f7eb6c046ec65a237ceecb229ed68e18d1e97b661c5c3922914407f4a7aa582cc01605f3d731ace32105bc
- SSDEEP
  
  24576:QbLgurgQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626:QnsQqMSPbcBVQej/1INR
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3245) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm

© 2018-2024

Terms | Privacy