Overview

overview

10

Static

static

3

20240928ad...ry.exe

windows7-x64

10

20240928ad...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20240928adf2cc82dd943eaf15d31722b17a9a96wannacry

  • Size

    5.0MB

  • Sample

    240928-p22k6syhqd

  • MD5

    adf2cc82dd943eaf15d31722b17a9a96

  • SHA1

    bba4fc025fea5db838116128f0209c4ff6471356

  • SHA256

    bb88ce32092bae167487213d1aa7d8eee071bb7324faa0da36f7bd08ae3ce77a

  • SHA512

    20873faeb3401730f58f5fe8a7ee387d4c1acce31a2d18b3697ba9e5db52fcd9af83dc2493a71697f1c3833f1d0cf03f3c6b6560bc01878d0cf8f1f53b67c4dc

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SA+593R8yAVp2H:yDqPe1Cxcxk3ZA+zR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      20240928adf2cc82dd943eaf15d31722b17a9a96wannacry

    • Size

      5.0MB

    • MD5

      adf2cc82dd943eaf15d31722b17a9a96

    • SHA1

      bba4fc025fea5db838116128f0209c4ff6471356

    • SHA256

      bb88ce32092bae167487213d1aa7d8eee071bb7324faa0da36f7bd08ae3ce77a

    • SHA512

      20873faeb3401730f58f5fe8a7ee387d4c1acce31a2d18b3697ba9e5db52fcd9af83dc2493a71697f1c3833f1d0cf03f3c6b6560bc01878d0cf8f1f53b67c4dc

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SA+593R8yAVp2H:yDqPe1Cxcxk3ZA+zR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3069) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks