Overview

overview

10

Static

static

3

2024-11-08...ry.exe

windows7-x64

10

2024-11-08...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-08_4c9550716e65ad5686e221b5609ba2f5_wannacry

  • Size

    5.0MB

  • Sample

    241108-px14va1qfv

  • MD5

    4c9550716e65ad5686e221b5609ba2f5

  • SHA1

    70745ea82b9df63e8f6eb7194231a4801d6916ab

  • SHA256

    c6396e871eb94adb579b54eb946d704a3bcc306f6fe2abf8b0a7d74a45a386c6

  • SHA512

    80935ce4aa5b849b0be504bbf6ca71bfcc81a888970bef9731fe8c90f89c09008b0e6de05ecc9d850f69798266ce9f6f18d0867f9ac95daecb6e47a79ea9e3d2

  • SSDEEP

    24576:QbLgurgDdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXQA8cz:QnsEMSPbcBVQej/1INRx+TSqTdXQux

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-08_4c9550716e65ad5686e221b5609ba2f5_wannacry

    • Size

      5.0MB

    • MD5

      4c9550716e65ad5686e221b5609ba2f5

    • SHA1

      70745ea82b9df63e8f6eb7194231a4801d6916ab

    • SHA256

      c6396e871eb94adb579b54eb946d704a3bcc306f6fe2abf8b0a7d74a45a386c6

    • SHA512

      80935ce4aa5b849b0be504bbf6ca71bfcc81a888970bef9731fe8c90f89c09008b0e6de05ecc9d850f69798266ce9f6f18d0867f9ac95daecb6e47a79ea9e3d2

    • SSDEEP

      24576:QbLgurgDdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXQA8cz:QnsEMSPbcBVQej/1INRx+TSqTdXQux

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3129) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks