Overview

overview

10

Static

static

3

2024-11-30...ry.exe

windows7-x64

10

2024-11-30...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-30_f07b258f4b9e950f19e98bc7af409f74_wannacry

  • Size

    5.0MB

  • Sample

    241130-pnwsrstncy

  • MD5

    f07b258f4b9e950f19e98bc7af409f74

  • SHA1

    439806660ba405660165a0d30c5a6c5545fb656d

  • SHA256

    1682479d1a79cbab8381e1c5119ea2c2ae1bf3bed255396d2a0fa35c96619cba

  • SHA512

    a7839c4cda8f98919e6d0480cb50b482758e907a279d30d2093b9e957c3b017391f9f26869de88340d04060378ff398add29464f874fd29c8babd693b8842d0d

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAAEau3R8yAH1plAH:yDqPoBhz1aRxcSUDk36SAG3R8yAVp2H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-11-30_f07b258f4b9e950f19e98bc7af409f74_wannacry

    • Size

      5.0MB

    • MD5

      f07b258f4b9e950f19e98bc7af409f74

    • SHA1

      439806660ba405660165a0d30c5a6c5545fb656d

    • SHA256

      1682479d1a79cbab8381e1c5119ea2c2ae1bf3bed255396d2a0fa35c96619cba

    • SHA512

      a7839c4cda8f98919e6d0480cb50b482758e907a279d30d2093b9e957c3b017391f9f26869de88340d04060378ff398add29464f874fd29c8babd693b8842d0d

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAAEau3R8yAH1plAH:yDqPoBhz1aRxcSUDk36SAG3R8yAVp2H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3224) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks