Overview

overview

10

Static

static

3

2024-12-12...ry.exe

windows7-x64

10

2024-12-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-12_bd06e9e94fe3e88b8ea894f1b7bb5f2b_wannacry

  • Size

    5.0MB

  • Sample

    241212-n2wjgsvqdp

  • MD5

    bd06e9e94fe3e88b8ea894f1b7bb5f2b

  • SHA1

    84a92fcfe1954f97aa20fca1c91cb4dd63c4d310

  • SHA256

    40f5dee3911afee1dce2522f4bcedd083b9ba4aa77e3c3b387670d4c74d7c2a9

  • SHA512

    ee7d0e5dee5659c66f6014294659766efa0a021074f8c86cdce358e11a0955304812dc917bc88832b5ac4ba0a2066b00f3c531c26843e22e8856fba0fc6bc537

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0z+RdhAdmv:2nAQqMSPbcBVqRdhnv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-12_bd06e9e94fe3e88b8ea894f1b7bb5f2b_wannacry

    • Size

      5.0MB

    • MD5

      bd06e9e94fe3e88b8ea894f1b7bb5f2b

    • SHA1

      84a92fcfe1954f97aa20fca1c91cb4dd63c4d310

    • SHA256

      40f5dee3911afee1dce2522f4bcedd083b9ba4aa77e3c3b387670d4c74d7c2a9

    • SHA512

      ee7d0e5dee5659c66f6014294659766efa0a021074f8c86cdce358e11a0955304812dc917bc88832b5ac4ba0a2066b00f3c531c26843e22e8856fba0fc6bc537

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0z+RdhAdmv:2nAQqMSPbcBVqRdhnv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3266) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks