Overview

overview

10

Static

static

3

2024-10-30...ry.exe

windows7-x64

10

2024-10-30...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-30_6d4be73f2e3c7ba98ea9eda27c9bf7d6_wannacry

  • Size

    5.0MB

  • Sample

    241030-xvdjrs1lfp

  • MD5

    6d4be73f2e3c7ba98ea9eda27c9bf7d6

  • SHA1

    0086de39898ebace21275f5c5c8e0980fc0b7dce

  • SHA256

    d46baceb692e3cf6e3bb0a309c0446541d7a85b7af98d32cdabfd37cf8399d2a

  • SHA512

    da7dd954c19156b3e43bb04a2d9f9ad07828d905e3b4198094744abd814776ba3b902843b4d27cb4c1b8ea3510a296d516a1f269ab83e9e55cae385eda4093e2

  • SSDEEP

    6144:eE9l9ynRIYVTH5DgSgNajldktM0XXrCIai62yV9qbBLIwY:e1bLgmluCti62ybaI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-30_6d4be73f2e3c7ba98ea9eda27c9bf7d6_wannacry

    • Size

      5.0MB

    • MD5

      6d4be73f2e3c7ba98ea9eda27c9bf7d6

    • SHA1

      0086de39898ebace21275f5c5c8e0980fc0b7dce

    • SHA256

      d46baceb692e3cf6e3bb0a309c0446541d7a85b7af98d32cdabfd37cf8399d2a

    • SHA512

      da7dd954c19156b3e43bb04a2d9f9ad07828d905e3b4198094744abd814776ba3b902843b4d27cb4c1b8ea3510a296d516a1f269ab83e9e55cae385eda4093e2

    • SSDEEP

      6144:eE9l9ynRIYVTH5DgSgNajldktM0XXrCIai62yV9qbBLIwY:e1bLgmluCti62ybaI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3235) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks