Overview

overview

10

Static

static

3

2024-10-11...ry.exe

windows7-x64

10

2024-10-11...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-11_6ee589bb3792fab785966db1f902de7e_wannacry

  • Size

    3.8MB

  • Sample

    241011-qxs9nszenp

  • MD5

    6ee589bb3792fab785966db1f902de7e

  • SHA1

    f6330b32e06dbf09bff6a28b0e3aeb114686f3f0

  • SHA256

    e1e3d00443ecfe5904f1f51505ecd747f215c3f7b6d4443019317b7a9f1770e4

  • SHA512

    3e56c705031347fa1f8faa17c11ec1032fe7315943d16f30f8c776fb6f9238aa75f98d153cae0bf12746d87157d26d765597e17adc886965f12ab22551fb039e

  • SSDEEP

    49152:unsEKUacBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxiHgYk6:asyfBhz1aRxcSUDk36SAEdhvxiHgYk

Score
10/10
wannacryaspackv2discoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-11_6ee589bb3792fab785966db1f902de7e_wannacry

    • Size

      3.8MB

    • MD5

      6ee589bb3792fab785966db1f902de7e

    • SHA1

      f6330b32e06dbf09bff6a28b0e3aeb114686f3f0

    • SHA256

      e1e3d00443ecfe5904f1f51505ecd747f215c3f7b6d4443019317b7a9f1770e4

    • SHA512

      3e56c705031347fa1f8faa17c11ec1032fe7315943d16f30f8c776fb6f9238aa75f98d153cae0bf12746d87157d26d765597e17adc886965f12ab22551fb039e

    • SSDEEP

      49152:unsEKUacBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxiHgYk6:asyfBhz1aRxcSUDk36SAEdhvxiHgYk

    Score
    10/10
    wannacryaspackv2discoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (2382) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in Drivers directory

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks