Overview

overview

10

Static

static

3

2024-10-12...ry.exe

windows7-x64

10

2024-10-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_a7629162d9ba17e903cfe0eb0068fba0_wannacry

  • Size

    3.6MB

  • Sample

    241012-ff1bjsydnn

  • MD5

    a7629162d9ba17e903cfe0eb0068fba0

  • SHA1

    338db4ee5e5adb1402cc0d482da7c2616c034c67

  • SHA256

    63dd1f3fea9f40c5fa316ac32d1cd772e3ea0e85025c80c609530e2d30f50a08

  • SHA512

    013ff333dcea2be0b8efba0a1bf1fc5bdaf20e77f5484aa399717bc52397b685ed71b93a4c50dc0a0a2b2dbce8674875c9eaca2b655084f8685ae718a3ec8d86

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0NSk+RdhAdmv:2nAQqMSPbcBVNARdhnv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-12_a7629162d9ba17e903cfe0eb0068fba0_wannacry

    • Size

      3.6MB

    • MD5

      a7629162d9ba17e903cfe0eb0068fba0

    • SHA1

      338db4ee5e5adb1402cc0d482da7c2616c034c67

    • SHA256

      63dd1f3fea9f40c5fa316ac32d1cd772e3ea0e85025c80c609530e2d30f50a08

    • SHA512

      013ff333dcea2be0b8efba0a1bf1fc5bdaf20e77f5484aa399717bc52397b685ed71b93a4c50dc0a0a2b2dbce8674875c9eaca2b655084f8685ae718a3ec8d86

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0NSk+RdhAdmv:2nAQqMSPbcBVNARdhnv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3146) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks