Overview

overview

10

Static

static

3

2024-11-15...ry.exe

windows7-x64

10

2024-11-15...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-15_4ab5fcb960643cbcc93f1609cf3e739c_wannacry

  • Size

    5.0MB

  • Sample

    241115-nk3w8stcnh

  • MD5

    4ab5fcb960643cbcc93f1609cf3e739c

  • SHA1

    8e1f788ae584d2e0308685a6a01b47b77c935234

  • SHA256

    7b6bbff50c00331a26a6b6f5b75912dc48d00f3abb04b8ab70160ab0aa470df4

  • SHA512

    c16b565003354220b863e8eacbcbdbeecf96ab5861f5783c85b979375296f18d8150a1bbd682241b2d171b822ca0cea4e942234a3b688e5a644b1b5de3f776bc

  • SSDEEP

    98304:t8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:t8qPe1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-15_4ab5fcb960643cbcc93f1609cf3e739c_wannacry

    • Size

      5.0MB

    • MD5

      4ab5fcb960643cbcc93f1609cf3e739c

    • SHA1

      8e1f788ae584d2e0308685a6a01b47b77c935234

    • SHA256

      7b6bbff50c00331a26a6b6f5b75912dc48d00f3abb04b8ab70160ab0aa470df4

    • SHA512

      c16b565003354220b863e8eacbcbdbeecf96ab5861f5783c85b979375296f18d8150a1bbd682241b2d171b822ca0cea4e942234a3b688e5a644b1b5de3f776bc

    • SSDEEP

      98304:t8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:t8qPe1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3338) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks