Overview

overview

10

Static

static

3

2024-10-12...ry.exe

windows7-x64

10

2024-10-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_e703af18fd99162aecb47cedf6a3c1ef_wannacry

  • Size

    3.6MB

  • Sample

    241012-fra6sszapp

  • MD5

    e703af18fd99162aecb47cedf6a3c1ef

  • SHA1

    cd3ba649a964dddbff7b48e03d8e17101fb94ecc

  • SHA256

    4f39b7af2abc81571c2c4a1bbeb336b7828aecbfc13609e7d9fd868f47abdc69

  • SHA512

    d99464a04c8734851a642d829a5918114967798894d50cf024f410a93d84607e125112a04a30348915185fb4394713c986f8ebc3ce97ea6836531deb09931490

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAn593R8yAVp2HI:yDqPe1Cxcxk3ZAnzR8yc4HI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-12_e703af18fd99162aecb47cedf6a3c1ef_wannacry

    • Size

      3.6MB

    • MD5

      e703af18fd99162aecb47cedf6a3c1ef

    • SHA1

      cd3ba649a964dddbff7b48e03d8e17101fb94ecc

    • SHA256

      4f39b7af2abc81571c2c4a1bbeb336b7828aecbfc13609e7d9fd868f47abdc69

    • SHA512

      d99464a04c8734851a642d829a5918114967798894d50cf024f410a93d84607e125112a04a30348915185fb4394713c986f8ebc3ce97ea6836531deb09931490

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAn593R8yAVp2HI:yDqPe1Cxcxk3ZAnzR8yc4HI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3151) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks