Overview

overview

10

Static

static

3

2024-10-03...ry.exe

windows7-x64

10

2024-10-03...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-03_52a932ee7598b2695ff3a24c3c2e6775_wannacry

  • Size

    5.0MB

  • Sample

    241003-l168gszemg

  • MD5

    52a932ee7598b2695ff3a24c3c2e6775

  • SHA1

    4c4bb429bb0f67a60c0d4f78b538a82769c481c1

  • SHA256

    f1547be8357c61e87519139121270b482c2f48201b2a0f5b4566021c532532ab

  • SHA512

    e320a0931754e64c1249e704a318a362facbffe8a3cbd2bd846af841b3a9f70a713d0b1afebf327bea9f3907225efc7c66e622c3b5098d9d0355b02b932208d1

  • SSDEEP

    24576:VbLgdeQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626TtA0p+9XEk:VnjQqMSPbcBVQej/1INRmAH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-03_52a932ee7598b2695ff3a24c3c2e6775_wannacry

    • Size

      5.0MB

    • MD5

      52a932ee7598b2695ff3a24c3c2e6775

    • SHA1

      4c4bb429bb0f67a60c0d4f78b538a82769c481c1

    • SHA256

      f1547be8357c61e87519139121270b482c2f48201b2a0f5b4566021c532532ab

    • SHA512

      e320a0931754e64c1249e704a318a362facbffe8a3cbd2bd846af841b3a9f70a713d0b1afebf327bea9f3907225efc7c66e622c3b5098d9d0355b02b932208d1

    • SSDEEP

      24576:VbLgdeQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626TtA0p+9XEk:VnjQqMSPbcBVQej/1INRmAH

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3363) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks