wannacry | 700393853aeed3c9f0005617fd2e2a243fadf0c702bfadb578e3016ee0ce74ba | Triage

Sharing

General

Target

202409276bbd8d117f31dd3d3d5444e4b1301259wannacry
Size

2.2MB
Sample

240928-allsfszaqa
MD5

6bbd8d117f31dd3d3d5444e4b1301259
SHA1

554dd8dc2c087e352092110f6588b403bb6122ba
SHA256

700393853aeed3c9f0005617fd2e2a243fadf0c702bfadb578e3016ee0ce74ba
SHA512

8ce22f7fd9df31b79c55f36c0c37b0ad7126e0de2d82a11ca29e9dd00af7c8d8958e1c3072498a2d0296b358d4d365d92017936dd979aa91fa362039f84cd100
SSDEEP

24576:QbLguriehfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626wX6SASk+RdhAdmf:QnHqMSPbcBVQej/1INR96SAARdhnvn

Score

10^/10

wannacry discovery ransomware worm

Malware Config

Targets

- Target
  
  202409276bbd8d117f31dd3d3d5444e4b1301259wannacry
- Size
  
  2.2MB
- MD5
  
  6bbd8d117f31dd3d3d5444e4b1301259
- SHA1
  
  554dd8dc2c087e352092110f6588b403bb6122ba
- SHA256
  
  700393853aeed3c9f0005617fd2e2a243fadf0c702bfadb578e3016ee0ce74ba
- SHA512
  
  8ce22f7fd9df31b79c55f36c0c37b0ad7126e0de2d82a11ca29e9dd00af7c8d8958e1c3072498a2d0296b358d4d365d92017936dd979aa91fa362039f84cd100
- SSDEEP
  
  24576:QbLguriehfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626wX6SASk+RdhAdmf:QnHqMSPbcBVQej/1INR96SAARdhnvn
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (2111) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm