Overview

overview

10

Static

static

3

2024-11-25...ry.exe

windows7-x64

10

2024-11-25...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-25_e3c9eca0e9a6ba851c579603d8e7b268_wannacry

  • Size

    5.0MB

  • Sample

    241125-q8849szmbx

  • MD5

    e3c9eca0e9a6ba851c579603d8e7b268

  • SHA1

    ab416508599e13625642d6ac609f952aa02a519b

  • SHA256

    36ca44b52aa5fe4a49414cdf1cbf5741520708bd3336723c260f113d790d4e83

  • SHA512

    06342e5aecb30d61ef630486104df60296258b094ae168a3d569591d28a4f368f6f0e717ca571693bbbb1bee42abd21b21f7e2893eac45aaf33eb9ad7cb0db09

  • SSDEEP

    98304:onj5mqtRvJEZ+jT4guDNIltHTOibMR3LvYuENf07dFfmh+OcvTrvM3R/zTqg0qFu:onK2/yGr6R

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-25_e3c9eca0e9a6ba851c579603d8e7b268_wannacry

    • Size

      5.0MB

    • MD5

      e3c9eca0e9a6ba851c579603d8e7b268

    • SHA1

      ab416508599e13625642d6ac609f952aa02a519b

    • SHA256

      36ca44b52aa5fe4a49414cdf1cbf5741520708bd3336723c260f113d790d4e83

    • SHA512

      06342e5aecb30d61ef630486104df60296258b094ae168a3d569591d28a4f368f6f0e717ca571693bbbb1bee42abd21b21f7e2893eac45aaf33eb9ad7cb0db09

    • SSDEEP

      98304:onj5mqtRvJEZ+jT4guDNIltHTOibMR3LvYuENf07dFfmh+OcvTrvM3R/zTqg0qFu:onK2/yGr6R

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3145) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks