Overview

overview

10

Static

static

3

wannacry.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    wannacry-72561912d1dfc1be9773a99b90339dee.zip

  • Size

    144KB

  • Sample

    241004-nwkvsssbnm

  • MD5

    72561912d1dfc1be9773a99b90339dee

  • SHA1

    fe6bbc9a2451ea54f86849387b5a17270179e492

  • SHA256

    dfc45e2b38be92959ef8198fb1463d89bbceb9d61c01792623af1bd7a22b6111

  • SHA512

    91387fc12a1d6a14a1a6b763e8a485a0e1ecb0820e566687dae0f65ddd6d96c0350e349fdaec2b503323625b4edd7329ad0ba4a60badc53a621df064a40374bc

  • SSDEEP

    3072:YVOSQnyywDXC8E+iQ9jAiPcZ34Lv7Fb55O1KPwo0l3QpNRDx:YASQV28jjoDdOwN6Q7Rd

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      wannacry.exe

    • Size

      276KB

    • MD5

      14131d9a5de9dd62ccc53a05d60b1a15

    • SHA1

      c3309c4598bfe98d6e52cc93b19d2876eaccc538

    • SHA256

      f60d07422a50e62bf3b92ab406b83b26fcd203a1e77ae2a9a6c239766f65eb8f

    • SHA512

      ea5e1a8d3cff14bd5fbdacfa724a5e7142866b7595621adc254fb5ce1bf7e86c1b23e13b44e902299729e3dccccc4b02aabee5f05490fccfc006c39ee19da3be

    • SSDEEP

      6144:HE9l9yeqIYVTH5DgSg8ajldktM0XXrEhypyhqHBuDp0Nc8Qs:HVbLgPluEhq0Dp

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (829) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks