Overview

overview

10

Static

static

3

2024-09-30...ry.exe

windows7-x64

10

2024-09-30...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-30_fb65c104fda352d6d6f376f2067cec81_wannacry

  • Size

    5.0MB

  • Sample

    240930-ns13lstaqq

  • MD5

    fb65c104fda352d6d6f376f2067cec81

  • SHA1

    366bed2b532d5b3bbc94dcf8e4310dd03d172f74

  • SHA256

    5d220e019660fbbd8ad49b387427027a89166ffbd7c869a929027452b3458ac1

  • SHA512

    b4e3366606bc481609df677902cb42be4a90dba6062c4f1c96a3b5aea62e82c3375b7bec7422e0edc93aea50d4664d16b53439bb3845c36c4cbed003c0b72ab0

  • SSDEEP

    49152:QnnMSPbcBVQej/Nx+TSqTdX1HkQo6SAARdhnv:QnPoBhzNxcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-09-30_fb65c104fda352d6d6f376f2067cec81_wannacry

    • Size

      5.0MB

    • MD5

      fb65c104fda352d6d6f376f2067cec81

    • SHA1

      366bed2b532d5b3bbc94dcf8e4310dd03d172f74

    • SHA256

      5d220e019660fbbd8ad49b387427027a89166ffbd7c869a929027452b3458ac1

    • SHA512

      b4e3366606bc481609df677902cb42be4a90dba6062c4f1c96a3b5aea62e82c3375b7bec7422e0edc93aea50d4664d16b53439bb3845c36c4cbed003c0b72ab0

    • SSDEEP

      49152:QnnMSPbcBVQej/Nx+TSqTdX1HkQo6SAARdhnv:QnPoBhzNxcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3271) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks