Overview

overview

10

Static

static

3

2024-12-10...ry.exe

windows7-x64

10

2024-12-10...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-10_76200e43712a027203706a6eddcdf1d6_wannacry

  • Size

    3.6MB

  • Sample

    241210-atc6aaxjg1

  • MD5

    76200e43712a027203706a6eddcdf1d6

  • SHA1

    56da938233ed052146b4d20e71c2537db1be2a0e

  • SHA256

    c7ebe7109a29ebf48e9b11c2314774a87adf22c547096de7b12b1bf8d9839c7d

  • SHA512

    6e6ed111d4646681583c7d651a15d42599ff38d65d63218dcf84dc19a6d30adf9f5f61987a39e60bac507788199c712f6ce00930059cbebe7ec9eb2ad821adfd

  • SSDEEP

    49152:XnAQqMSPbcBVQej/1INRn+TSqTdX1HkQ8RdhnvNEau3R8yAH1plAV:XDqPoBhz1aRncSUDkxdhvU3R8yAVp2V

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-10_76200e43712a027203706a6eddcdf1d6_wannacry

    • Size

      3.6MB

    • MD5

      76200e43712a027203706a6eddcdf1d6

    • SHA1

      56da938233ed052146b4d20e71c2537db1be2a0e

    • SHA256

      c7ebe7109a29ebf48e9b11c2314774a87adf22c547096de7b12b1bf8d9839c7d

    • SHA512

      6e6ed111d4646681583c7d651a15d42599ff38d65d63218dcf84dc19a6d30adf9f5f61987a39e60bac507788199c712f6ce00930059cbebe7ec9eb2ad821adfd

    • SSDEEP

      49152:XnAQqMSPbcBVQej/1INRn+TSqTdX1HkQ8RdhnvNEau3R8yAH1plAV:XDqPoBhz1aRncSUDkxdhvU3R8yAVp2V

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3346) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks