Overview

overview

10

Static

static

3

2024-09-29...ry.exe

windows7-x64

10

2024-09-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-29_d37ddabc0e5da8f5829d5df023283446_wannacry

  • Size

    5.0MB

  • Sample

    240929-l9377azbrp

  • MD5

    d37ddabc0e5da8f5829d5df023283446

  • SHA1

    b8bcc1d6ce4ab9379be5476a86168f7028bdb4c6

  • SHA256

    bbb687754b36bc9f44715f14919dff9a7f90f3aed89015f26807458ebec2ee95

  • SHA512

    a3851b37e04dd547d67fd6f8d0f2c76445d7c1c9fbf997688a450b14de7ee3f9016d12eee7acf5fc136834feb4f6bf5e1cd399f14161571695cf3195db72e799

  • SSDEEP

    98304:XDqPoBhi1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:XDqPf1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-29_d37ddabc0e5da8f5829d5df023283446_wannacry

    • Size

      5.0MB

    • MD5

      d37ddabc0e5da8f5829d5df023283446

    • SHA1

      b8bcc1d6ce4ab9379be5476a86168f7028bdb4c6

    • SHA256

      bbb687754b36bc9f44715f14919dff9a7f90f3aed89015f26807458ebec2ee95

    • SHA512

      a3851b37e04dd547d67fd6f8d0f2c76445d7c1c9fbf997688a450b14de7ee3f9016d12eee7acf5fc136834feb4f6bf5e1cd399f14161571695cf3195db72e799

    • SSDEEP

      98304:XDqPoBhi1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:XDqPf1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3232) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks