Overview

overview

10

Static

static

3

2024-10-28...ry.exe

windows7-x64

10

2024-10-28...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-28_c5f54d50773618dbfc34f234c86d8b7e_wannacry

  • Size

    5.0MB

  • Sample

    241028-m3n1csxgrj

  • MD5

    c5f54d50773618dbfc34f234c86d8b7e

  • SHA1

    cee1cf8b0be1fde8e46825166a2226826dd4c63e

  • SHA256

    beb70ad86f877107e7a14d3e65f1ae07c4c77f6c18ed62faa73169a089df8c0a

  • SHA512

    5c6a822b622f2fa2f912bd275819ae3bc2a6ae5a8f9677cd45f7bdd02592db1ed6749a170262962b1289c788b0f39da8657423226fb83f61bc5ff54e9a61793c

  • SSDEEP

    49152:QnpEKUacBVQej/1INJx+TSqTdX1HkQo6SAARdhnv:QpyfBhz1aJxcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-28_c5f54d50773618dbfc34f234c86d8b7e_wannacry

    • Size

      5.0MB

    • MD5

      c5f54d50773618dbfc34f234c86d8b7e

    • SHA1

      cee1cf8b0be1fde8e46825166a2226826dd4c63e

    • SHA256

      beb70ad86f877107e7a14d3e65f1ae07c4c77f6c18ed62faa73169a089df8c0a

    • SHA512

      5c6a822b622f2fa2f912bd275819ae3bc2a6ae5a8f9677cd45f7bdd02592db1ed6749a170262962b1289c788b0f39da8657423226fb83f61bc5ff54e9a61793c

    • SSDEEP

      49152:QnpEKUacBVQej/1INJx+TSqTdX1HkQo6SAARdhnv:QpyfBhz1aJxcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3167) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks