Overview

overview

10

Static

static

3

2024-10-11...ry.exe

windows7-x64

10

2024-10-11...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-11_5369c5264d33ec4d65e4ac7d4bda9716_wannacry

  • Size

    3.6MB

  • Sample

    241011-c4llhswglr

  • MD5

    5369c5264d33ec4d65e4ac7d4bda9716

  • SHA1

    8e7c6c3065c4e9ab4ba8195f05de8de08e1c6de8

  • SHA256

    e82fe794d6ba03eb0fa858cea354d119a2b83b755ef26bb9dfa33a4273ba747f

  • SHA512

    5aa74b43c72c2042b8529cfb5b20d31f12f07a9052095c006aecebbe9117dc3e0ef0b502533a540144b8f00cbee3c4266ca6e7b8f981ea014cacd706d8ab5b84

  • SSDEEP

    24576:4bLguqQhfdmMSirYbcMNgef0QeQjG/D8kI29PO6GnEaut/8uMEANZtA0p+9XEkI:4naQqMSPbcBVQej/N9IEau3RAlAHI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-11_5369c5264d33ec4d65e4ac7d4bda9716_wannacry

    • Size

      3.6MB

    • MD5

      5369c5264d33ec4d65e4ac7d4bda9716

    • SHA1

      8e7c6c3065c4e9ab4ba8195f05de8de08e1c6de8

    • SHA256

      e82fe794d6ba03eb0fa858cea354d119a2b83b755ef26bb9dfa33a4273ba747f

    • SHA512

      5aa74b43c72c2042b8529cfb5b20d31f12f07a9052095c006aecebbe9117dc3e0ef0b502533a540144b8f00cbee3c4266ca6e7b8f981ea014cacd706d8ab5b84

    • SSDEEP

      24576:4bLguqQhfdmMSirYbcMNgef0QeQjG/D8kI29PO6GnEaut/8uMEANZtA0p+9XEkI:4naQqMSPbcBVQej/N9IEau3RAlAHI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3121) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks