Overview

overview

10

Static

static

3

2024-09-29...ry.exe

windows7-x64

10

2024-09-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-29_07c2948790583a46176008979c79cf13_wannacry

  • Size

    5.0MB

  • Sample

    240929-lc2cbsxglq

  • MD5

    07c2948790583a46176008979c79cf13

  • SHA1

    dd250e80a497ca3d86f0925b59f5db7887f142da

  • SHA256

    78e9eb1375b0daf619590c3ec1b271b65bbbd113575272e8fd74686a09f5b129

  • SHA512

    a98993d860d8243776f9cca173f9acbf829b25a8e1d8484e363b2448af3da125d629a8cfb246239996affdd5f10ad8f024e592e9e2451bd4d72154b83c133966

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0BXmiHkQg6eX6SASk+Rd:2nAQqMSPbcBVBX1HkQo6SAARd

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-29_07c2948790583a46176008979c79cf13_wannacry

    • Size

      5.0MB

    • MD5

      07c2948790583a46176008979c79cf13

    • SHA1

      dd250e80a497ca3d86f0925b59f5db7887f142da

    • SHA256

      78e9eb1375b0daf619590c3ec1b271b65bbbd113575272e8fd74686a09f5b129

    • SHA512

      a98993d860d8243776f9cca173f9acbf829b25a8e1d8484e363b2448af3da125d629a8cfb246239996affdd5f10ad8f024e592e9e2451bd4d72154b83c133966

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0BXmiHkQg6eX6SASk+Rd:2nAQqMSPbcBVBX1HkQo6SAARd

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3239) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks