Overview

overview

10

Static

static

3

2024-11-22...ry.exe

windows7-x64

10

2024-11-22...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-22_11589df42b5a4d4644c998de8a257583_wannacry

  • Size

    5.0MB

  • Sample

    241122-mjcszsvmgl

  • MD5

    11589df42b5a4d4644c998de8a257583

  • SHA1

    0b773d11135d11edf3983a72e0a6e92b24a98ba7

  • SHA256

    1099d916868cc70b98d841bdafb93676ea8415fed2108581d5ad601f0ed5bfaa

  • SHA512

    b78fbb624735069769e4776ac77531fdef5f43c6b0f2db7537a8c07410e4a2da3fa445808cedd9942b9bbad9ec5dbd9dfe6acd266d98fa5b164dcf0789abc113

  • SSDEEP

    24576:QbLguriIfEcQdIBrYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqT:QnpENbcBVQej/1INRx+TSqT

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-22_11589df42b5a4d4644c998de8a257583_wannacry

    • Size

      5.0MB

    • MD5

      11589df42b5a4d4644c998de8a257583

    • SHA1

      0b773d11135d11edf3983a72e0a6e92b24a98ba7

    • SHA256

      1099d916868cc70b98d841bdafb93676ea8415fed2108581d5ad601f0ed5bfaa

    • SHA512

      b78fbb624735069769e4776ac77531fdef5f43c6b0f2db7537a8c07410e4a2da3fa445808cedd9942b9bbad9ec5dbd9dfe6acd266d98fa5b164dcf0789abc113

    • SSDEEP

      24576:QbLguriIfEcQdIBrYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqT:QnpENbcBVQej/1INRx+TSqT

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3234) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks