Overview

overview

10

Static

static

3

2024-09-30...ry.exe

windows7-x64

10

2024-09-30...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-30_6b2955016683f8d68263b4fb9fcbdff0_wannacry

  • Size

    2.2MB

  • Sample

    240930-3pqj2avcmf

  • MD5

    6b2955016683f8d68263b4fb9fcbdff0

  • SHA1

    4e3ca927b24c258ce9efce302376581824cfa9ed

  • SHA256

    0847fccbd1db636aa97a867171a9c1e96f94f524d388cac5b932b75ab6129e13

  • SHA512

    d7d75d315110560c13829b957cfc775e67859a55292ac93ca65d35dc393757eba0629a890e94dbfc4b7bc811a1f7a57fcdaa6b90b43208cbfe2120c80267d1cf

  • SSDEEP

    49152:QntMSPbcL1Iz+TSqTdX1HkQo6SAARdhnvn:QtPoL1OcSUDk36SAEdhvn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-30_6b2955016683f8d68263b4fb9fcbdff0_wannacry

    • Size

      2.2MB

    • MD5

      6b2955016683f8d68263b4fb9fcbdff0

    • SHA1

      4e3ca927b24c258ce9efce302376581824cfa9ed

    • SHA256

      0847fccbd1db636aa97a867171a9c1e96f94f524d388cac5b932b75ab6129e13

    • SHA512

      d7d75d315110560c13829b957cfc775e67859a55292ac93ca65d35dc393757eba0629a890e94dbfc4b7bc811a1f7a57fcdaa6b90b43208cbfe2120c80267d1cf

    • SSDEEP

      49152:QntMSPbcL1Iz+TSqTdX1HkQo6SAARdhnvn:QtPoL1OcSUDk36SAEdhvn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3270) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks