Overview

overview

10

Static

static

3

2024-11-14...ry.exe

windows7-x64

10

2024-11-14...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-14_0290f270994dde3502f7b78b0bcb6236_wannacry

  • Size

    3.6MB

  • Sample

    241114-k1qeaswgjh

  • MD5

    0290f270994dde3502f7b78b0bcb6236

  • SHA1

    b451248188ee6f475ed3dda00db928f4be710e29

  • SHA256

    03dff98732bb5a21b31a2bb41a87960b7907aa8a91a178a64466e76411f49222

  • SHA512

    c8cb8b1a1f57d78df79d419a8abfe38de9ff76953c060b034acf306013ebf00b3c363f61be614e0ca4e4bbf8fb590d3b65b6221db5ba9321269bef93c7d51df9

  • SSDEEP

    12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zU:2bLgddQhfdmMSirYbcMNgefU

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-14_0290f270994dde3502f7b78b0bcb6236_wannacry

    • Size

      3.6MB

    • MD5

      0290f270994dde3502f7b78b0bcb6236

    • SHA1

      b451248188ee6f475ed3dda00db928f4be710e29

    • SHA256

      03dff98732bb5a21b31a2bb41a87960b7907aa8a91a178a64466e76411f49222

    • SHA512

      c8cb8b1a1f57d78df79d419a8abfe38de9ff76953c060b034acf306013ebf00b3c363f61be614e0ca4e4bbf8fb590d3b65b6221db5ba9321269bef93c7d51df9

    • SSDEEP

      12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zU:2bLgddQhfdmMSirYbcMNgefU

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3215) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks