Overview

overview

10

Static

static

3

2024-11-16...ry.exe

windows7-x64

10

2024-11-16...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-16_d8fc95d63a5d4e8a413e187321561f16_wannacry

  • Size

    5.0MB

  • Sample

    241116-s6daxssqdj

  • MD5

    d8fc95d63a5d4e8a413e187321561f16

  • SHA1

    c7e9be664f768d073e36964d0807ed3936fbbb24

  • SHA256

    ce87862629dc6205e829620806edab7daccfb5bf4b007f5f0d9906d2ff464aa3

  • SHA512

    c45a21f21b0f07e2409fd8d9df79f8090803f4499746893c2447a4a0f29a5c96a3c30acb1a0f511c1cada785d87cf6382378ebb84e37cf59b4d1f362e7e98c4e

  • SSDEEP

    49152:QnpEfPbcBVQej/1INRx+TSqTdX1HkQo6SAARdh:QpUoBhz1aRxcSUDk36SAEdh

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-16_d8fc95d63a5d4e8a413e187321561f16_wannacry

    • Size

      5.0MB

    • MD5

      d8fc95d63a5d4e8a413e187321561f16

    • SHA1

      c7e9be664f768d073e36964d0807ed3936fbbb24

    • SHA256

      ce87862629dc6205e829620806edab7daccfb5bf4b007f5f0d9906d2ff464aa3

    • SHA512

      c45a21f21b0f07e2409fd8d9df79f8090803f4499746893c2447a4a0f29a5c96a3c30acb1a0f511c1cada785d87cf6382378ebb84e37cf59b4d1f362e7e98c4e

    • SSDEEP

      49152:QnpEfPbcBVQej/1INRx+TSqTdX1HkQo6SAARdh:QpUoBhz1aRxcSUDk36SAEdh

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3300) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks