Resubmissions

10-11-2024 10:00

241110-l1nfdaxpcr 10

10-11-2024 07:46

241110-jl9c7asgqe 10

General

  • Target

    2024-11-10_4821592196d7f5466902107a156c7541_wannacry

  • Size

    2.2MB

  • Sample

    241110-l1nfdaxpcr

  • MD5

    4821592196d7f5466902107a156c7541

  • SHA1

    beb4a53494038bcda85ab4dc8813e2b78d1f79cf

  • SHA256

    fe1858ea442d8f264ae1616507184e95f433e723f8f5ea7e7c8ba740cfca8fb1

  • SHA512

    aff0e32a792daa2a2666de75bf894c3550bf6ee4ee06efae1d3ec449e54eeafd89dfbdc6bf9de1a72cb001533ab8d887a857621b97e1c20ee1e3f6cb6bc5106f

  • SSDEEP

    24576:VbLguVQhfdmMSirYbcMNgef0QeQjG/hYoAdN:VnFQqMSPbcBVQej/hIN

Malware Config

Targets

    • Target

      2024-11-10_4821592196d7f5466902107a156c7541_wannacry

    • Size

      2.2MB

    • MD5

      4821592196d7f5466902107a156c7541

    • SHA1

      beb4a53494038bcda85ab4dc8813e2b78d1f79cf

    • SHA256

      fe1858ea442d8f264ae1616507184e95f433e723f8f5ea7e7c8ba740cfca8fb1

    • SHA512

      aff0e32a792daa2a2666de75bf894c3550bf6ee4ee06efae1d3ec449e54eeafd89dfbdc6bf9de1a72cb001533ab8d887a857621b97e1c20ee1e3f6cb6bc5106f

    • SSDEEP

      24576:VbLguVQhfdmMSirYbcMNgef0QeQjG/hYoAdN:VnFQqMSPbcBVQej/hIN

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Wannacry family

    • Contacts a large (1934) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks