Overview

overview

10

Static

static

3

2024-12-10...ry.exe

windows7-x64

10

2024-12-10...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-10_429b36371ea397ba851495434908bd49_wannacry

  • Size

    5.0MB

  • Sample

    241210-nwyfwsvkes

  • MD5

    429b36371ea397ba851495434908bd49

  • SHA1

    69d751f1766bca02cb052040dbab532b8aa0c302

  • SHA256

    c3cb14963f6c191a053a1a54a8dec774eda61809ca96d9ca8209124760f2d528

  • SHA512

    ce9cb1465f6beb5bf0413531b5a1c265f3e8aa9080b3b71ea9da389e684093858445cd4146870893afb0d5a58d5b0f123a818624651538542d14c5acecdcc772

  • SSDEEP

    49152:XnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0HY:XDqPoBhz1aRxcSUDk36SAEdhvxWa

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-10_429b36371ea397ba851495434908bd49_wannacry

    • Size

      5.0MB

    • MD5

      429b36371ea397ba851495434908bd49

    • SHA1

      69d751f1766bca02cb052040dbab532b8aa0c302

    • SHA256

      c3cb14963f6c191a053a1a54a8dec774eda61809ca96d9ca8209124760f2d528

    • SHA512

      ce9cb1465f6beb5bf0413531b5a1c265f3e8aa9080b3b71ea9da389e684093858445cd4146870893afb0d5a58d5b0f123a818624651538542d14c5acecdcc772

    • SSDEEP

      49152:XnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0HY:XDqPoBhz1aRxcSUDk36SAEdhvxWa

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3165) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks