Overview

overview

10

Static

static

3

2024-10-14...ry.exe

windows7-x64

10

2024-10-14...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-14_1cf2fc587e0a51748be2f5cc98550cff_wannacry

  • Size

    5.0MB

  • Sample

    241014-s893nsserc

  • MD5

    1cf2fc587e0a51748be2f5cc98550cff

  • SHA1

    a51a139d154bd785a1d4f4d415324ecc138ed115

  • SHA256

    4a5179e5278854968ace795a400164cb264cde7c7c4ddf990385bbca65872413

  • SHA512

    d71bb72942344863a93c0c53e300a94f3aa5d021b9c400a3d276252caa9716f8e3856b3fa15f6b7fc1966ba8a0b173d644d4bc4b71e206301d073d8620f39a23

  • SSDEEP

    49152:QnsQqMSPbcBVQej/1INRx+TSqTdX1HkQ:Q/qPoBhz1aRxcSUDk

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-14_1cf2fc587e0a51748be2f5cc98550cff_wannacry

    • Size

      5.0MB

    • MD5

      1cf2fc587e0a51748be2f5cc98550cff

    • SHA1

      a51a139d154bd785a1d4f4d415324ecc138ed115

    • SHA256

      4a5179e5278854968ace795a400164cb264cde7c7c4ddf990385bbca65872413

    • SHA512

      d71bb72942344863a93c0c53e300a94f3aa5d021b9c400a3d276252caa9716f8e3856b3fa15f6b7fc1966ba8a0b173d644d4bc4b71e206301d073d8620f39a23

    • SSDEEP

      49152:QnsQqMSPbcBVQej/1INRx+TSqTdX1HkQ:Q/qPoBhz1aRxcSUDk

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3050) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks