wannacry | 9d2cf39086ca8e690f6689f3a6604baa0b636e64fc8a07ff77d621e7bcdecf13 | Triage

Submit
Reports

Overview

overview

Static

static

3

20240930fb...ry.exe

windows7-x64

20240930fb...ry.exe

windows10-2004-x64

Sharing

General

Target

20240930fb5118b3d7b9f73daf3e8ba499d7c709wannacry
Size

5.0MB
Sample

240930-wjv41asbqe
MD5

fb5118b3d7b9f73daf3e8ba499d7c709
SHA1

3f3f92a6b0ccfa6055ed5ee73d01bafcacb25885
SHA256

9d2cf39086ca8e690f6689f3a6604baa0b636e64fc8a07ff77d621e7bcdecf13
SHA512

9b4f36d7e04e1f9aa321dc88d655205c9badce5d4b91d8fc06d3c49f7b2edcef29a2e1bd85873cbaad3ef755870f6d6be0174f8cdd89af9e8c3b6514bcc6fb32
SSDEEP

49152:QnnMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAev:QnPoBhz1aRxcSUDk36SA7

Score

10^/10

wannacry discovery ransomware worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

20240930fb5118b3d7b9f73daf3e8ba499d7c709wannacry.exe

Resource

win7-20240903-en

wannacry discovery ransomware worm

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

20240930fb5118b3d7b9f73daf3e8ba499d7c709wannacry.exe

Resource

win10v2004-20240802-en

wannacry discovery ransomware worm

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  20240930fb5118b3d7b9f73daf3e8ba499d7c709wannacry
- Size
  
  5.0MB
- MD5
  
  fb5118b3d7b9f73daf3e8ba499d7c709
- SHA1
  
  3f3f92a6b0ccfa6055ed5ee73d01bafcacb25885
- SHA256
  
  9d2cf39086ca8e690f6689f3a6604baa0b636e64fc8a07ff77d621e7bcdecf13
- SHA512
  
  9b4f36d7e04e1f9aa321dc88d655205c9badce5d4b91d8fc06d3c49f7b2edcef29a2e1bd85873cbaad3ef755870f6d6be0174f8cdd89af9e8c3b6514bcc6fb32
- SSDEEP
  
  49152:QnnMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAev:QnPoBhz1aRxcSUDk36SA7
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3022) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm

© 2018-2024

Terms | Privacy