Overview

overview

10

Static

static

3

2024-11-11...ry.exe

windows7-x64

10

2024-11-11...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-11_7b65594196838d8f5fb013dcfac6fada_wannacry

  • Size

    5.0MB

  • Sample

    241111-tyjneazqcv

  • MD5

    7b65594196838d8f5fb013dcfac6fada

  • SHA1

    df08e23af71157c649644ddf0fa4b78d64150c79

  • SHA256

    47159de8dca63f2cd81a6f2cd52fa7782a3ef9c35edabfefc338756b74986501

  • SHA512

    e5210b97d5e357547511e95801169df16acf31ec7b1b0e75578359dd789a9b744b7cf1040a7bd8fd8f361468072e134963455aa0747afd9a3d941a87103496d5

  • SSDEEP

    49152:QnxQqMSPbcBVQej/1INRx+TSqTdX1HkQ:Q6qPoBhz1aRxcSUDk

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-11_7b65594196838d8f5fb013dcfac6fada_wannacry

    • Size

      5.0MB

    • MD5

      7b65594196838d8f5fb013dcfac6fada

    • SHA1

      df08e23af71157c649644ddf0fa4b78d64150c79

    • SHA256

      47159de8dca63f2cd81a6f2cd52fa7782a3ef9c35edabfefc338756b74986501

    • SHA512

      e5210b97d5e357547511e95801169df16acf31ec7b1b0e75578359dd789a9b744b7cf1040a7bd8fd8f361468072e134963455aa0747afd9a3d941a87103496d5

    • SSDEEP

      49152:QnxQqMSPbcBVQej/1INRx+TSqTdX1HkQ:Q6qPoBhz1aRxcSUDk

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3316) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks