Overview

overview

10

Static

static

3

2024-10-31...ry.exe

windows7-x64

10

2024-10-31...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-31_43cdfc3db6d4c2711621a5458f388996_wannacry

  • Size

    3.6MB

  • Sample

    241031-ef3w1azald

  • MD5

    43cdfc3db6d4c2711621a5458f388996

  • SHA1

    f27dfbafc3bb8cf062ef1a09a971aaa4300669fa

  • SHA256

    4f7f9e039ed529e7334164255b572a652932689c0ffeb4bd78cb45bf9571d399

  • SHA512

    29c8b4ae7f6ca19e0e5dbae996adc6992985963b13c6c3c616c44bfbd2f4f95c2c99cdff794a490908e6b2b7d1accfabd7b48825c969cab712893981677bfcd2

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P5y3R8yAVp2HI:yDqPe1Cxcxk3ZAEUadiR8yc4HI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-10-31_43cdfc3db6d4c2711621a5458f388996_wannacry

    • Size

      3.6MB

    • MD5

      43cdfc3db6d4c2711621a5458f388996

    • SHA1

      f27dfbafc3bb8cf062ef1a09a971aaa4300669fa

    • SHA256

      4f7f9e039ed529e7334164255b572a652932689c0ffeb4bd78cb45bf9571d399

    • SHA512

      29c8b4ae7f6ca19e0e5dbae996adc6992985963b13c6c3c616c44bfbd2f4f95c2c99cdff794a490908e6b2b7d1accfabd7b48825c969cab712893981677bfcd2

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P5y3R8yAVp2HI:yDqPe1Cxcxk3ZAEUadiR8yc4HI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3259) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks