Overview

overview

10

Static

static

3

2024-10-12...ry.exe

windows7-x64

10

2024-10-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_4dd0d9085befa746dc9f2ccec1a5f1af_wannacry

  • Size

    2.2MB

  • Sample

    241012-ealers1fqe

  • MD5

    4dd0d9085befa746dc9f2ccec1a5f1af

  • SHA1

    e99bab33f4e804260e3037a0ace0ed8a3de799fe

  • SHA256

    a6d19eb89a050ab4b98ef4527712cc6baa5ee19ef2f4975f749db94ff77046b0

  • SHA512

    c88403ca4cae92953d8d1199f27aaed67ebe63504aadf07294e9c8b4537e7b309ec316b3d91d4940a5de3167385893c3ef2a29e1213d1a80bd4df97e916e2d36

  • SSDEEP

    24576:QbLgurihdmMSirYbcMNgef0tTA8tncmbpldOInwBVXOpV:QnnMSPbcBVW8tncmbpldOInwBVXOpV

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-12_4dd0d9085befa746dc9f2ccec1a5f1af_wannacry

    • Size

      2.2MB

    • MD5

      4dd0d9085befa746dc9f2ccec1a5f1af

    • SHA1

      e99bab33f4e804260e3037a0ace0ed8a3de799fe

    • SHA256

      a6d19eb89a050ab4b98ef4527712cc6baa5ee19ef2f4975f749db94ff77046b0

    • SHA512

      c88403ca4cae92953d8d1199f27aaed67ebe63504aadf07294e9c8b4537e7b309ec316b3d91d4940a5de3167385893c3ef2a29e1213d1a80bd4df97e916e2d36

    • SSDEEP

      24576:QbLgurihdmMSirYbcMNgef0tTA8tncmbpldOInwBVXOpV:QnnMSPbcBVW8tncmbpldOInwBVXOpV

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3311) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks