Overview

overview

10

Static

static

3

2024-11-13...ry.exe

windows7-x64

10

2024-11-13...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-13_6628d84dc8d027c526087875f227b00e_wannacry

  • Size

    5.0MB

  • Sample

    241113-rwh8ratdlf

  • MD5

    6628d84dc8d027c526087875f227b00e

  • SHA1

    0a0a0b7c51eb18984a343b53855b7c199ba50df5

  • SHA256

    f1d22b4f885e936072d2044641e7b8862db1c58a20c1bba3f4f21c51a991f640

  • SHA512

    040ca54c94f783fd021e012a6be5691f7587a9a09e8cdff271004c536efc09e20ee7a80c30071464a0146146cfad9c61856e99cdfe10f8087e0c24bc47b3410f

  • SSDEEP

    49152:2nAQqMSPbcBVJNRx+TSqTdX1HkQo6SAARdhnvxJM0H9:yDqPoBJRxcSUDk36SAEdhvxWa9

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-13_6628d84dc8d027c526087875f227b00e_wannacry

    • Size

      5.0MB

    • MD5

      6628d84dc8d027c526087875f227b00e

    • SHA1

      0a0a0b7c51eb18984a343b53855b7c199ba50df5

    • SHA256

      f1d22b4f885e936072d2044641e7b8862db1c58a20c1bba3f4f21c51a991f640

    • SHA512

      040ca54c94f783fd021e012a6be5691f7587a9a09e8cdff271004c536efc09e20ee7a80c30071464a0146146cfad9c61856e99cdfe10f8087e0c24bc47b3410f

    • SSDEEP

      49152:2nAQqMSPbcBVJNRx+TSqTdX1HkQo6SAARdhnvxJM0H9:yDqPoBJRxcSUDk36SAEdhvxWa9

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3180) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks