Overview

overview

10

Static

static

3

2024-11-21...ry.exe

windows7-x64

10

2024-11-21...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-21_cf01a1f2e0d816886836c6ec71e94569_wannacry

  • Size

    5.0MB

  • Sample

    241121-m6kgca1cqg

  • MD5

    cf01a1f2e0d816886836c6ec71e94569

  • SHA1

    d3fca64235d00cb3f0c96b528660e189c77d36fb

  • SHA256

    fb314e0916a770f3da361eb313720ad0dd3951f5d8d1d0410ac76dd3fbd33d09

  • SHA512

    b1cbc31da33634cc46e220be5bf535062a34ce336519bbaa35ae22c5281473a622da97e9fe85b3f9a7a4c43e8bb0568d47be4a5ed0ac732c7fdcc2782d8db645

  • SSDEEP

    24576:QbLguhQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626:QnxQqMSPbcBVQej/1INR

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-21_cf01a1f2e0d816886836c6ec71e94569_wannacry

    • Size

      5.0MB

    • MD5

      cf01a1f2e0d816886836c6ec71e94569

    • SHA1

      d3fca64235d00cb3f0c96b528660e189c77d36fb

    • SHA256

      fb314e0916a770f3da361eb313720ad0dd3951f5d8d1d0410ac76dd3fbd33d09

    • SHA512

      b1cbc31da33634cc46e220be5bf535062a34ce336519bbaa35ae22c5281473a622da97e9fe85b3f9a7a4c43e8bb0568d47be4a5ed0ac732c7fdcc2782d8db645

    • SSDEEP

      24576:QbLguhQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626:QnxQqMSPbcBVQej/1INR

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3000) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks