Overview

overview

10

Static

static

3

2024-12-01...ry.exe

windows7-x64

10

2024-12-01...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-01_aa5b407f77eb30e9584b4670ac4604d4_wannacry

  • Size

    5.0MB

  • Sample

    241201-pqn6ps1nfx

  • MD5

    aa5b407f77eb30e9584b4670ac4604d4

  • SHA1

    b403708856b662c687f65cd819165a37468ab763

  • SHA256

    86bc73d7005d35907da21802c16ff60365e223ff79b201bba87215236f7bae2e

  • SHA512

    181e3b283ca5eaadaf6e105aed6f2907f4da4c11e920b09fc34d9e7c3a0d9c213db9c018da089e224891be83e97b3bcf2fe59a38b549bdeca57e62d90cbd314e

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9GAMEcaEa:yDqPoBhz1aRxcSUDk36SAEdhvxWa9G5

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-01_aa5b407f77eb30e9584b4670ac4604d4_wannacry

    • Size

      5.0MB

    • MD5

      aa5b407f77eb30e9584b4670ac4604d4

    • SHA1

      b403708856b662c687f65cd819165a37468ab763

    • SHA256

      86bc73d7005d35907da21802c16ff60365e223ff79b201bba87215236f7bae2e

    • SHA512

      181e3b283ca5eaadaf6e105aed6f2907f4da4c11e920b09fc34d9e7c3a0d9c213db9c018da089e224891be83e97b3bcf2fe59a38b549bdeca57e62d90cbd314e

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9GAMEcaEa:yDqPoBhz1aRxcSUDk36SAEdhvxWa9G5

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3328) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks