Overview

overview

10

Static

static

3

2024-11-14...ry.exe

windows7-x64

10

2024-11-14...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-14_53b59dac7f15722f31ba559d645b57cd_wannacry

  • Size

    3.6MB

  • Sample

    241114-lptg9awnhx

  • MD5

    53b59dac7f15722f31ba559d645b57cd

  • SHA1

    0b73b90f583c63db0677ce951b80429421150544

  • SHA256

    85e5613a3735de5919afcddeb03fd046c391c2903594e6c7d5de2c642f66c7d0

  • SHA512

    e0f98948e164b5c5ef276b54c65cb240768d067849886eb969c8ddcc750164724d0bd5c38eae197b1df83d341232c97126bd7ca423a64cf6ad58d0bca0fd23f3

  • SSDEEP

    24576:VbLgdeQhfdmMSirYbcMNgef0QeQjG/D8kIqc+9kEmzKAxGqcCZ4:VnjQqMSPbcBVQej/1IKQB4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-14_53b59dac7f15722f31ba559d645b57cd_wannacry

    • Size

      3.6MB

    • MD5

      53b59dac7f15722f31ba559d645b57cd

    • SHA1

      0b73b90f583c63db0677ce951b80429421150544

    • SHA256

      85e5613a3735de5919afcddeb03fd046c391c2903594e6c7d5de2c642f66c7d0

    • SHA512

      e0f98948e164b5c5ef276b54c65cb240768d067849886eb969c8ddcc750164724d0bd5c38eae197b1df83d341232c97126bd7ca423a64cf6ad58d0bca0fd23f3

    • SSDEEP

      24576:VbLgdeQhfdmMSirYbcMNgef0QeQjG/D8kIqc+9kEmzKAxGqcCZ4:VnjQqMSPbcBVQej/1IKQB4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3249) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks