Overview

overview

10

Static

static

3

2024093002...ry.exe

windows7-x64

10

2024093002...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024093002e12465c6a4b579ebd6a2a22aec1342wannacry

  • Size

    5.0MB

  • Sample

    240930-v9cvnsxemr

  • MD5

    02e12465c6a4b579ebd6a2a22aec1342

  • SHA1

    f01870cea20c51c32e34e59539514f7e39982226

  • SHA256

    e40240c0698b141a8d6bf2e4d8c4e8437fa4ecdbd61f5e3560114906d2f0086f

  • SHA512

    44ac1e1d3eaa1870548928805ae1493f7594ed5cd4056c4eb91c964dcbdbfe4b28eea6fa3f38eff1dc3d393625f4282e5de31cba5fd7b90055bd91e8bec92966

  • SSDEEP

    49152:XnjQqMSPbcBVQej/1INRYX1HoARdhnvxJM0H9PAME:X8qPoBhz1aRWoEdhvxWa9P5

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024093002e12465c6a4b579ebd6a2a22aec1342wannacry

    • Size

      5.0MB

    • MD5

      02e12465c6a4b579ebd6a2a22aec1342

    • SHA1

      f01870cea20c51c32e34e59539514f7e39982226

    • SHA256

      e40240c0698b141a8d6bf2e4d8c4e8437fa4ecdbd61f5e3560114906d2f0086f

    • SHA512

      44ac1e1d3eaa1870548928805ae1493f7594ed5cd4056c4eb91c964dcbdbfe4b28eea6fa3f38eff1dc3d393625f4282e5de31cba5fd7b90055bd91e8bec92966

    • SSDEEP

      49152:XnjQqMSPbcBVQej/1INRYX1HoARdhnvxJM0H9PAME:X8qPoBhz1aRWoEdhvxWa9P5

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3251) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks