wannacry

Resubmissions

08/11/2024, 14:44

241108-r4madathmk10

08/11/2024, 14:43

241108-r337hatjhy10

08/11/2024, 13:04

241108-qbakfasjf110

Sharing

Copy URL Twitter E-mail

General

Target
2024-11-08_f44e76524ae3e3db4c1f1b4532ced4dc_wannacry
Size 5.0MB
Sample241108-qbakfasjf1
SHA256 c6ab3a2d7944b32a00ed7be21558ce6d9115b0ad1fbdfabe371b5d44d6080628
MD5 f44e76524ae3e3db4c1f1b4532ced4dc
SHA1 2a1f60d41dfc4b15acf56168218d70744e6cf2a7
SHA512 424f130f8cfdbea149fb6ca57754e1fa4b11966944aa56774e424cc83f1b9a115011d27dfcdd590e24c25bcdbddc957fcbd18f3ed50f2db7d6ceea402c8fab75
SSDEEP 98304:yWqPoBhz1aP6SAEdhvxWa9P593R8yAVp2H:yWqPe1EZAEUadzR8yc4H
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  2024-11-08_f44e76524ae3e3db4c1f1b4532ced4dc_wannacry
- Size 5.0MB
- SHA256 c6ab3a2d7944b32a00ed7be21558ce6d9115b0ad1fbdfabe371b5d44d6080628
- MD5 f44e76524ae3e3db4c1f1b4532ced4dc
- SHA1 2a1f60d41dfc4b15acf56168218d70744e6cf2a7
- SHA512 424f130f8cfdbea149fb6ca57754e1fa4b11966944aa56774e424cc83f1b9a115011d27dfcdd590e24c25bcdbddc957fcbd18f3ed50f2db7d6ceea402c8fab75
- SSDEEP 98304:yWqPoBhz1aP6SAEdhvxWa9P593R8yAVp2H:yWqPe1EZAEUadzR8yc4H
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Wannacry family
  wannacry
- Contacts a large (3204) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Wannacry family

Contacts a large (3204) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2