Overview

overview

10

Static

static

3

2024-10-12...ry.exe

windows7-x64

10

2024-10-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_109b910fa7c7c1955d8838c05efe49c3_wannacry

  • Size

    2.2MB

  • Sample

    241012-de3n6stcnk

  • MD5

    109b910fa7c7c1955d8838c05efe49c3

  • SHA1

    9790531a2e05bd99ddd58b6b3bea0c0afe91bc65

  • SHA256

    113b1a7a2843975f7530e569050f6788e5abd3207a36482d4d1ee5376ffc690b

  • SHA512

    1255cd8e028c6c5589ba40fba22dc37e9f619732a8c0433163c55734c504536e84e26f99dedf44891bec813f16ead67e6526f50a76fae3fa1f11b28fd6802a61

  • SSDEEP

    24576:QbLguriAdmMSirYbcMNgef0QeQjG/D8kIqRYQX6SASk+Kkmvn:QnOMSPbcBVQej/1R6SAAIvn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-12_109b910fa7c7c1955d8838c05efe49c3_wannacry

    • Size

      2.2MB

    • MD5

      109b910fa7c7c1955d8838c05efe49c3

    • SHA1

      9790531a2e05bd99ddd58b6b3bea0c0afe91bc65

    • SHA256

      113b1a7a2843975f7530e569050f6788e5abd3207a36482d4d1ee5376ffc690b

    • SHA512

      1255cd8e028c6c5589ba40fba22dc37e9f619732a8c0433163c55734c504536e84e26f99dedf44891bec813f16ead67e6526f50a76fae3fa1f11b28fd6802a61

    • SSDEEP

      24576:QbLguriAdmMSirYbcMNgef0QeQjG/D8kIqRYQX6SASk+Kkmvn:QnOMSPbcBVQej/1R6SAAIvn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3134) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks