Overview

overview

10

Static

static

3

2024-11-19...ry.exe

windows7-x64

10

2024-11-19...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-19_001291f3278e27f43f753cc5843be429_wannacry

  • Size

    4.1MB

  • Sample

    241119-ctklgazdrl

  • MD5

    001291f3278e27f43f753cc5843be429

  • SHA1

    a6c22ac95fd0172e724b414b02a5fb2e61557ab9

  • SHA256

    b03501cae380e4b39e28c519594e57e138b5a73ce5c19a6ba89420d4323fd262

  • SHA512

    fb4afc101741014e51a7aea68c7446e777a3d92b392873b423339d3fcef0dae0106a14834d4dfd71baac02591338f762d5f6dae8b0b2b0dc7778499f3d817bbc

  • SSDEEP

    98304:wDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HFa83:wDqPe1Cxcxk3ZAEUadzR8yc4HFa8

Score
10/10
wannacrydiscoveryransomwarespywarestealerworm

Malware Config

Targets

    • Target

      2024-11-19_001291f3278e27f43f753cc5843be429_wannacry

    • Size

      4.1MB

    • MD5

      001291f3278e27f43f753cc5843be429

    • SHA1

      a6c22ac95fd0172e724b414b02a5fb2e61557ab9

    • SHA256

      b03501cae380e4b39e28c519594e57e138b5a73ce5c19a6ba89420d4323fd262

    • SHA512

      fb4afc101741014e51a7aea68c7446e777a3d92b392873b423339d3fcef0dae0106a14834d4dfd71baac02591338f762d5f6dae8b0b2b0dc7778499f3d817bbc

    • SSDEEP

      98304:wDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HFa83:wDqPe1Cxcxk3ZAEUadzR8yc4HFa8

    Score
    10/10
    wannacrydiscoveryransomwarespywarestealerworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3228) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks