Overview

overview

10

Static

static

3

2024-09-29...ry.exe

windows7-x64

10

2024-09-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-29_c12d7c3ced6d612ba53ddd33b0926576_wannacry

  • Size

    5.0MB

  • Sample

    240929-lwk5fsyeqj

  • MD5

    c12d7c3ced6d612ba53ddd33b0926576

  • SHA1

    7da0d1a224930e3e1239b2c8f711b2ee7b11b9b4

  • SHA256

    622a8312f8e35dad59ec6d1689200c6a6104ca608312c49e69a19b55513623b2

  • SHA512

    50e4f36812fe4edfebe4fa57392aa5f1aea617e212c6f083875aac281ecc571d3bfd79484179c2c55064d492a44f23979e480d80440c48bca7a5275aed0735d2

  • SSDEEP

    98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P59+AVp2H:Z8qPe1Cxcxk3ZAEUadic4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-29_c12d7c3ced6d612ba53ddd33b0926576_wannacry

    • Size

      5.0MB

    • MD5

      c12d7c3ced6d612ba53ddd33b0926576

    • SHA1

      7da0d1a224930e3e1239b2c8f711b2ee7b11b9b4

    • SHA256

      622a8312f8e35dad59ec6d1689200c6a6104ca608312c49e69a19b55513623b2

    • SHA512

      50e4f36812fe4edfebe4fa57392aa5f1aea617e212c6f083875aac281ecc571d3bfd79484179c2c55064d492a44f23979e480d80440c48bca7a5275aed0735d2

    • SSDEEP

      98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P59+AVp2H:Z8qPe1Cxcxk3ZAEUadic4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3250) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks