Overview

overview

10

Static

static

3

2024-09-29...ry.exe

windows7-x64

10

2024-09-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-29_7eb5c49d2a0ed285b2fc260b48bd7204_wannacry

  • Size

    5.0MB

  • Sample

    240929-l2akxasejg

  • MD5

    7eb5c49d2a0ed285b2fc260b48bd7204

  • SHA1

    8e4ad6861f9ddbf63e39fbdbcae6d6b0c9ccaadd

  • SHA256

    24459d72ce6e9759aeb17a7703fde9a5f93ab9c488032913647ab2be348f9708

  • SHA512

    873f9a1bb1b8ddca8242e1f146f6d8de4548b743d2838718d651d5dfcf6263df67f0cdbd0c23b6134c2ae311eb94dc843dee7d4ce892571f3755849208d726e5

  • SSDEEP

    98304:yDqPoBhz1aYk36SAEdhvxWa9P593R8yAVp2H:yDqPe1dk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-29_7eb5c49d2a0ed285b2fc260b48bd7204_wannacry

    • Size

      5.0MB

    • MD5

      7eb5c49d2a0ed285b2fc260b48bd7204

    • SHA1

      8e4ad6861f9ddbf63e39fbdbcae6d6b0c9ccaadd

    • SHA256

      24459d72ce6e9759aeb17a7703fde9a5f93ab9c488032913647ab2be348f9708

    • SHA512

      873f9a1bb1b8ddca8242e1f146f6d8de4548b743d2838718d651d5dfcf6263df67f0cdbd0c23b6134c2ae311eb94dc843dee7d4ce892571f3755849208d726e5

    • SSDEEP

      98304:yDqPoBhz1aYk36SAEdhvxWa9P593R8yAVp2H:yDqPe1dk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3203) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks