Overview

overview

10

Static

static

3

2024-09-29...ry.exe

windows7-x64

10

2024-09-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-29_e9bb28ccdade265f09e2f11b5ff87dd6_wannacry

  • Size

    5.0MB

  • Sample

    240929-mchewstaqf

  • MD5

    e9bb28ccdade265f09e2f11b5ff87dd6

  • SHA1

    db430b47e9bb1430dbac0c8094fb01beead3a9bf

  • SHA256

    d5b042b4193d30668d48d1d6b38f8fb39889157636ff903d9fd4227b5c7fb8ce

  • SHA512

    e0058529f5e89a1282423cd9060c6ccdb175ceba5845204d9000db2f1f43338725752ebb0fc16b187d960b2c237dcdc271b3435b820b21aa740627d627f07d67

  • SSDEEP

    49152:/nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAACJE3jM2ce:PDqPoBhz1aRxcSUDk36SAHE3Xc

Score
10/10
wannacrydiscoveryransomwarespywarestealerworm

Malware Config

Targets

    • Target

      2024-09-29_e9bb28ccdade265f09e2f11b5ff87dd6_wannacry

    • Size

      5.0MB

    • MD5

      e9bb28ccdade265f09e2f11b5ff87dd6

    • SHA1

      db430b47e9bb1430dbac0c8094fb01beead3a9bf

    • SHA256

      d5b042b4193d30668d48d1d6b38f8fb39889157636ff903d9fd4227b5c7fb8ce

    • SHA512

      e0058529f5e89a1282423cd9060c6ccdb175ceba5845204d9000db2f1f43338725752ebb0fc16b187d960b2c237dcdc271b3435b820b21aa740627d627f07d67

    • SSDEEP

      49152:/nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAACJE3jM2ce:PDqPoBhz1aRxcSUDk36SAHE3Xc

    Score
    10/10
    wannacrydiscoveryransomwarespywarestealerworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3216) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks