Overview

overview

10

Static

static

3

2024-12-07...ry.exe

windows7-x64

10

2024-12-07...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-07_447758bb751cccf07f7aa8e62261b3ae_wannacry

  • Size

    5.0MB

  • Sample

    241207-mt6h2svlcn

  • MD5

    447758bb751cccf07f7aa8e62261b3ae

  • SHA1

    d514813ca0ba38c70f009c76a1738e5389ab5acf

  • SHA256

    406838b37307d2a8dd19c7700868114ac272576aab8c7038927a5912f2608a8b

  • SHA512

    8a93df15c2335c00c469ca1946f799b3853215c745dfc876211a30da6a20e72dd5c3c21e0e1d9ae529898986ee855c9b8814959a4ede2534e6c0356ae598ddf0

  • SSDEEP

    49152:XnjQLMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:X8LPoBhz1aRxcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-07_447758bb751cccf07f7aa8e62261b3ae_wannacry

    • Size

      5.0MB

    • MD5

      447758bb751cccf07f7aa8e62261b3ae

    • SHA1

      d514813ca0ba38c70f009c76a1738e5389ab5acf

    • SHA256

      406838b37307d2a8dd19c7700868114ac272576aab8c7038927a5912f2608a8b

    • SHA512

      8a93df15c2335c00c469ca1946f799b3853215c745dfc876211a30da6a20e72dd5c3c21e0e1d9ae529898986ee855c9b8814959a4ede2534e6c0356ae598ddf0

    • SSDEEP

      49152:XnjQLMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:X8LPoBhz1aRxcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3247) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks