Overview

overview

10

Static

static

3

2024-12-08...ry.exe

windows7-x64

10

2024-12-08...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-08_d1c2ffe43450f5b6f3a824da9da13ffa_wannacry

  • Size

    5.0MB

  • Sample

    241208-mfkpes1jfv

  • MD5

    d1c2ffe43450f5b6f3a824da9da13ffa

  • SHA1

    f323aa356c11acc9918582e18b8f26984fda4a84

  • SHA256

    15395661378bed05ccb30e0120de029d30970cddd4d57322001398674764c8cb

  • SHA512

    605dfaf7ec0620f2e089ff9b78dd979a0fb41018ab757978bf1a3ac7842080e0bbc78a9de50233f40f2c8cd895b55171b84831b2c9925e1384065c74515defc1

  • SSDEEP

    49152:QnAQqMSPbcBVQej/1INROX1HkQo6SAARd:QDqPoBhz1aRok36SAEd

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-08_d1c2ffe43450f5b6f3a824da9da13ffa_wannacry

    • Size

      5.0MB

    • MD5

      d1c2ffe43450f5b6f3a824da9da13ffa

    • SHA1

      f323aa356c11acc9918582e18b8f26984fda4a84

    • SHA256

      15395661378bed05ccb30e0120de029d30970cddd4d57322001398674764c8cb

    • SHA512

      605dfaf7ec0620f2e089ff9b78dd979a0fb41018ab757978bf1a3ac7842080e0bbc78a9de50233f40f2c8cd895b55171b84831b2c9925e1384065c74515defc1

    • SSDEEP

      49152:QnAQqMSPbcBVQej/1INROX1HkQo6SAARd:QDqPoBhz1aRok36SAEd

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3244) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks