Overview

overview

10

Static

static

3

2024-10-12...ry.exe

windows7-x64

10

2024-10-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_1027ac5cf665240a1949682b85cc5114_wannacry

  • Size

    3.6MB

  • Sample

    241012-fdz8rstgmh

  • MD5

    1027ac5cf665240a1949682b85cc5114

  • SHA1

    e3cbb7e4d1674e6dd8610fc64890c5cbf45a659a

  • SHA256

    adabf38a3a3160561b63ebe31de7af1be6df9d24b0f06ef0f249007aaf469cd6

  • SHA512

    c5a23892242b921744a897d93bb5085ffcbca1c0eea85499721e6167bf95eacab6048def6c3f866cb933377eb847f4deffcaf0b89561622e73fdecc97ad49e24

  • SSDEEP

    49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQB:Z8qPoBhz1aRxcSUDkI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-12_1027ac5cf665240a1949682b85cc5114_wannacry

    • Size

      3.6MB

    • MD5

      1027ac5cf665240a1949682b85cc5114

    • SHA1

      e3cbb7e4d1674e6dd8610fc64890c5cbf45a659a

    • SHA256

      adabf38a3a3160561b63ebe31de7af1be6df9d24b0f06ef0f249007aaf469cd6

    • SHA512

      c5a23892242b921744a897d93bb5085ffcbca1c0eea85499721e6167bf95eacab6048def6c3f866cb933377eb847f4deffcaf0b89561622e73fdecc97ad49e24

    • SSDEEP

      49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQB:Z8qPoBhz1aRxcSUDkI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3327) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks