Overview

overview

10

Static

static

3

2024-10-07...ry.exe

windows7-x64

10

2024-10-07...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-07_27d47924bd8d5cd88ddb29b31ad6a83d_wannacry

  • Size

    5.0MB

  • Sample

    241007-m1kj6a1fnj

  • MD5

    27d47924bd8d5cd88ddb29b31ad6a83d

  • SHA1

    9f1c0fff43e5c156bb1e13a00f9eb36c7c00a53a

  • SHA256

    032e17237f1c9dfde026f1add7ef54d812eb14604bfcaa77863a8042c041d7be

  • SHA512

    117081b66b4b02d279fd27b0af57a751fa525658dc06f9d6ffd54d2b58d030092ea260f54d783be1bb010a25b5b6c241287a1783c0e9ef2e90f0168525ab63be

  • SSDEEP

    49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-07_27d47924bd8d5cd88ddb29b31ad6a83d_wannacry

    • Size

      5.0MB

    • MD5

      27d47924bd8d5cd88ddb29b31ad6a83d

    • SHA1

      9f1c0fff43e5c156bb1e13a00f9eb36c7c00a53a

    • SHA256

      032e17237f1c9dfde026f1add7ef54d812eb14604bfcaa77863a8042c041d7be

    • SHA512

      117081b66b4b02d279fd27b0af57a751fa525658dc06f9d6ffd54d2b58d030092ea260f54d783be1bb010a25b5b6c241287a1783c0e9ef2e90f0168525ab63be

    • SSDEEP

      49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3311) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks