Overview

overview

10

Static

static

3

2024-11-30...ry.exe

windows7-x64

10

2024-11-30...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-30_502af25f02676a62996b8f0a79cd53bd_wannacry

  • Size

    5.0MB

  • Sample

    241130-p6hnvstrev

  • MD5

    502af25f02676a62996b8f0a79cd53bd

  • SHA1

    e95d49e6f5426a011757a96a9c46b51412213d50

  • SHA256

    09c4a99bb7df869dd08c1e530389d4c968332c7b66aea74c7d577ae1595698d3

  • SHA512

    9e6ad8f9857b0f496f432db8d93038defdf1bfcd185e42df66043190236b9afd2a3e34fe54fac6c15ef3f603e05ee1360a8d31302f997d6cafbe8a452001b75b

  • SSDEEP

    6144:FE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhMV9qb:FwbLgPluxQhMb

Score
10/10
wannacrydefense_evasiondiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-30_502af25f02676a62996b8f0a79cd53bd_wannacry

    • Size

      5.0MB

    • MD5

      502af25f02676a62996b8f0a79cd53bd

    • SHA1

      e95d49e6f5426a011757a96a9c46b51412213d50

    • SHA256

      09c4a99bb7df869dd08c1e530389d4c968332c7b66aea74c7d577ae1595698d3

    • SHA512

      9e6ad8f9857b0f496f432db8d93038defdf1bfcd185e42df66043190236b9afd2a3e34fe54fac6c15ef3f603e05ee1360a8d31302f997d6cafbe8a452001b75b

    • SSDEEP

      6144:FE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhMV9qb:FwbLgPluxQhMb

    Score
    10/10
    wannacrydefense_evasiondiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3310) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • File and Directory Permissions Modification: Windows File and Directory Permissions Modification

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks