Overview

overview

10

Static

static

3

2024-12-07...ry.exe

windows7-x64

10

2024-12-07...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-07_b385a9e7c98b2b006db23806a86b96dc_wannacry

  • Size

    5.0MB

  • Sample

    241207-mx7waazjes

  • MD5

    b385a9e7c98b2b006db23806a86b96dc

  • SHA1

    692879ad41d6c44c32b734d9c80237c852d798b1

  • SHA256

    d1fbe0d083b0427662d6191054493cc72a38a1684a8165696f1dc55813d8bf28

  • SHA512

    5fd924f0312e76255c44aef5535592544ad79d5d3217436a8b3c0b5e7f53ee868a3188c0eb1d332972977439b6cc49bf98c91920fb73e38eb62e61cb451e29b0

  • SSDEEP

    49152:XnAQqMSPbcBVQ6+TSqTdX1HkQo6SAARdhnvxJM0H9PAMEcaEa:XDqPoBlcSUDk36SAEdhvxWa9P5

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-07_b385a9e7c98b2b006db23806a86b96dc_wannacry

    • Size

      5.0MB

    • MD5

      b385a9e7c98b2b006db23806a86b96dc

    • SHA1

      692879ad41d6c44c32b734d9c80237c852d798b1

    • SHA256

      d1fbe0d083b0427662d6191054493cc72a38a1684a8165696f1dc55813d8bf28

    • SHA512

      5fd924f0312e76255c44aef5535592544ad79d5d3217436a8b3c0b5e7f53ee868a3188c0eb1d332972977439b6cc49bf98c91920fb73e38eb62e61cb451e29b0

    • SSDEEP

      49152:XnAQqMSPbcBVQ6+TSqTdX1HkQo6SAARdhnvxJM0H9PAMEcaEa:XDqPoBlcSUDk36SAEdhvxWa9P5

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3316) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks