Overview

overview

10

Static

static

3

2024-09-29...ry.exe

windows7-x64

10

2024-09-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-29_7e45c6698eaf11b979809937693bf542_wannacry

  • Size

    5.0MB

  • Sample

    240929-l1tx6asdra

  • MD5

    7e45c6698eaf11b979809937693bf542

  • SHA1

    66f59eb554178333fc1ad45b139e5144bf0e5216

  • SHA256

    cd1e83c4c9993b27a9fa33b75fe30252add68b23a384beb47d3d413acda83941

  • SHA512

    4735abc301ea6564d3e946b5fe96608028ac942d75003f4e09b8e1c7ff551187eb6f851ea4ecf8f6c1a224d131ca2ade02f79fc3c6d3d11afda73e5d4aa5a22f

  • SSDEEP

    98304:XDqPoBtaRxcSUDk36SAEdhvxWa9P593R8yAVp2H:XDqPICxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-29_7e45c6698eaf11b979809937693bf542_wannacry

    • Size

      5.0MB

    • MD5

      7e45c6698eaf11b979809937693bf542

    • SHA1

      66f59eb554178333fc1ad45b139e5144bf0e5216

    • SHA256

      cd1e83c4c9993b27a9fa33b75fe30252add68b23a384beb47d3d413acda83941

    • SHA512

      4735abc301ea6564d3e946b5fe96608028ac942d75003f4e09b8e1c7ff551187eb6f851ea4ecf8f6c1a224d131ca2ade02f79fc3c6d3d11afda73e5d4aa5a22f

    • SSDEEP

      98304:XDqPoBtaRxcSUDk36SAEdhvxWa9P593R8yAVp2H:XDqPICxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3237) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks