Overview

overview

10

Static

static

3

2024-10-12...ry.exe

windows7-x64

10

2024-10-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_7ef672e3e1d9015a95831848fe26f068_wannacry

  • Size

    3.6MB

  • Sample

    241012-fmnakaygqr

  • MD5

    7ef672e3e1d9015a95831848fe26f068

  • SHA1

    488aa9ed4472f657f0f49afadb668f65b294d3eb

  • SHA256

    68baedde98de0b2c5988b4afed250d8e946846e67093b3ecb42e2cfc722578e7

  • SHA512

    d78d71b8c3f0013aa872c567019e5b95f2ac3b7ed00ab4f9bc4d3d41b7633cb83531e33fde80f90427fec9af019e32b0b728daf652268eb06007fb118421e26e

  • SSDEEP

    98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9U2HI:XDqPe1Cxcxk3ZAEUahHI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-12_7ef672e3e1d9015a95831848fe26f068_wannacry

    • Size

      3.6MB

    • MD5

      7ef672e3e1d9015a95831848fe26f068

    • SHA1

      488aa9ed4472f657f0f49afadb668f65b294d3eb

    • SHA256

      68baedde98de0b2c5988b4afed250d8e946846e67093b3ecb42e2cfc722578e7

    • SHA512

      d78d71b8c3f0013aa872c567019e5b95f2ac3b7ed00ab4f9bc4d3d41b7633cb83531e33fde80f90427fec9af019e32b0b728daf652268eb06007fb118421e26e

    • SSDEEP

      98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9U2HI:XDqPe1Cxcxk3ZAEUahHI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3270) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks