Overview

overview

10

Static

static

3

2024-11-15...ry.exe

windows7-x64

10

2024-11-15...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-15_cdb7e3c7ae5db7055b7c46c6d6563c64_wannacry

  • Size

    4.1MB

  • Sample

    241115-1h113swpdj

  • MD5

    cdb7e3c7ae5db7055b7c46c6d6563c64

  • SHA1

    4c8ca91ada23032bbfb853c475b792708951d3d3

  • SHA256

    f9428cc205c3b75cea52b0af388014b179e3d10153c7cc742fe84d176df9876e

  • SHA512

    262e51494c630892d3d6de36ca9fcb0702c4f107655458974c76e0fc819f0098e92755094bf8f8b052d15efb0d7a46669d3cd6c8374ba0e752c19fbba5bf52e1

  • SSDEEP

    98304:qDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H3bx4uR:qDqPe1Cxcxk3ZAEUadzR8yc4H32

Score
10/10
wannacrydiscoveryransomwarespywarestealerworm

Malware Config

Targets

    • Target

      2024-11-15_cdb7e3c7ae5db7055b7c46c6d6563c64_wannacry

    • Size

      4.1MB

    • MD5

      cdb7e3c7ae5db7055b7c46c6d6563c64

    • SHA1

      4c8ca91ada23032bbfb853c475b792708951d3d3

    • SHA256

      f9428cc205c3b75cea52b0af388014b179e3d10153c7cc742fe84d176df9876e

    • SHA512

      262e51494c630892d3d6de36ca9fcb0702c4f107655458974c76e0fc819f0098e92755094bf8f8b052d15efb0d7a46669d3cd6c8374ba0e752c19fbba5bf52e1

    • SSDEEP

      98304:qDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H3bx4uR:qDqPe1Cxcxk3ZAEUadzR8yc4H32

    Score
    10/10
    wannacrydiscoveryransomwarespywarestealerworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3191) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks