Overview

overview

10

Static

static

3

2024-10-12...ry.exe

windows7-x64

10

2024-10-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_6ef7c36bc94a7626a9c663ecbc51e307_wannacry

  • Size

    2.2MB

  • Sample

    241012-enrhyaxajp

  • MD5

    6ef7c36bc94a7626a9c663ecbc51e307

  • SHA1

    a1748693a54a2656930453dbce6e0621b8d69018

  • SHA256

    ee85e1548b48414bbfc983b313644ad032ee4ed5b1b199cfa7c01d28cb858c9f

  • SHA512

    62888edd717894d2797c8a8a93a791b59fb1d751eaffccdd447bf4b414cc427a36678f5ffeded47f7681456af1fcb35adfe8be7767e2a387e3a909e467c9b77e

  • SSDEEP

    24576:QbLgurgDdmMSirYbcMNgef0QeQjG/D8kIqRYpQg6eX6SASk+R:QnsEMSPbcBVQej/1UQo6SAAR

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-12_6ef7c36bc94a7626a9c663ecbc51e307_wannacry

    • Size

      2.2MB

    • MD5

      6ef7c36bc94a7626a9c663ecbc51e307

    • SHA1

      a1748693a54a2656930453dbce6e0621b8d69018

    • SHA256

      ee85e1548b48414bbfc983b313644ad032ee4ed5b1b199cfa7c01d28cb858c9f

    • SHA512

      62888edd717894d2797c8a8a93a791b59fb1d751eaffccdd447bf4b414cc427a36678f5ffeded47f7681456af1fcb35adfe8be7767e2a387e3a909e467c9b77e

    • SSDEEP

      24576:QbLgurgDdmMSirYbcMNgef0QeQjG/D8kIqRYpQg6eX6SASk+R:QnsEMSPbcBVQej/1UQo6SAAR

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3279) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks