Overview

overview

10

Static

static

3

2024-11-23...ry.exe

windows7-x64

10

2024-11-23...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-23_b3f9df2d4710646b3a93e1ac7fec0a85_wannacry

  • Size

    5.0MB

  • Sample

    241123-qaah2svpay

  • MD5

    b3f9df2d4710646b3a93e1ac7fec0a85

  • SHA1

    d2df82bf808146be2ce42f002b15445547823fdb

  • SHA256

    2d124b11c21661e52c7af75fe0862837f7dd7c865f44c1a44ff3b5945ec02cfa

  • SHA512

    a07f2f8329e3a9d7b3accf3d8573cec544b0241fba31eea1ab0b87ae0c847eb8b5d4c5c395c0942d3cb85fec1a291f015b8cadd6ece8df75525ab620f6344c18

  • SSDEEP

    98304:czqPoBhUk36SAEdhvxWa9P593R8yAVp2H:czqP3k3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-23_b3f9df2d4710646b3a93e1ac7fec0a85_wannacry

    • Size

      5.0MB

    • MD5

      b3f9df2d4710646b3a93e1ac7fec0a85

    • SHA1

      d2df82bf808146be2ce42f002b15445547823fdb

    • SHA256

      2d124b11c21661e52c7af75fe0862837f7dd7c865f44c1a44ff3b5945ec02cfa

    • SHA512

      a07f2f8329e3a9d7b3accf3d8573cec544b0241fba31eea1ab0b87ae0c847eb8b5d4c5c395c0942d3cb85fec1a291f015b8cadd6ece8df75525ab620f6344c18

    • SSDEEP

      98304:czqPoBhUk36SAEdhvxWa9P593R8yAVp2H:czqP3k3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3208) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks