wannacry | 6a722e6297162bfb0e30b5d2bd1491b1afcd11ff411e77cd102954d33c8b73bc | Triage

Submit
Reports

Overview

overview

Static

static

3

2024092948...ry.exe

windows7-x64

2024092948...ry.exe

windows10-2004-x64

Sharing

General

Target

2024092948797d2a12144ddf43d2bb13e0e1365fwannacry
Size

5.0MB
Sample

240929-sf6jsasdkf
MD5

48797d2a12144ddf43d2bb13e0e1365f
SHA1

b4558f841fcf5b86f3daf68e0456c3d7984b1645
SHA256

6a722e6297162bfb0e30b5d2bd1491b1afcd11ff411e77cd102954d33c8b73bc
SHA512

54e908a6c5a19e32849454d446e5c136c471c9b756b54d9b04aaaeedf6674f3ead0973c87000f12814ea8196215cb01d06f51d68340c6595b09b0b5ab7f2582c
SSDEEP

12288:e1bLgmluCtgQbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+D85SQeuBRdhY:QbLgurgDdmMSirYbcMNgef0Xk+RdhA

Score

10^/10

wannacry discovery ransomware worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2024092948797d2a12144ddf43d2bb13e0e1365fwannacry.exe

Resource

win7-20240903-en

wannacry discovery ransomware worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024092948797d2a12144ddf43d2bb13e0e1365fwannacry.exe

Resource

win10v2004-20240802-en

wannacry discovery ransomware worm

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024092948797d2a12144ddf43d2bb13e0e1365fwannacry
- Size
  
  5.0MB
- MD5
  
  48797d2a12144ddf43d2bb13e0e1365f
- SHA1
  
  b4558f841fcf5b86f3daf68e0456c3d7984b1645
- SHA256
  
  6a722e6297162bfb0e30b5d2bd1491b1afcd11ff411e77cd102954d33c8b73bc
- SHA512
  
  54e908a6c5a19e32849454d446e5c136c471c9b756b54d9b04aaaeedf6674f3ead0973c87000f12814ea8196215cb01d06f51d68340c6595b09b0b5ab7f2582c
- SSDEEP
  
  12288:e1bLgmluCtgQbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+D85SQeuBRdhY:QbLgurgDdmMSirYbcMNgef0Xk+RdhA
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3207) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm

© 2018-2024

Terms | Privacy