Overview

overview

10

Static

static

3

2024-12-12...ry.exe

windows7-x64

10

2024-12-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-12_59b845147b9808d77d31d72d7552d6dd_wannacry

  • Size

    5.0MB

  • Sample

    241212-ng5awsvkar

  • MD5

    59b845147b9808d77d31d72d7552d6dd

  • SHA1

    d2889eb4b58327491e9e4a4e75cfa21b2e14a217

  • SHA256

    7fa62f163639b1b357fd4bd9e33d1c32e31f1b223d658967bd2280e5918f98bf

  • SHA512

    0f12ba9f8862c6622f13c52517d7a25f96fdf74dd79e9d7b80e6ddea1dfd5683db5941603566eec07c8c036565b3c60ebc2aa2e3f5ccbea723bd71d01585461f

  • SSDEEP

    98304:Z8qToBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:Z8qTe1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-12_59b845147b9808d77d31d72d7552d6dd_wannacry

    • Size

      5.0MB

    • MD5

      59b845147b9808d77d31d72d7552d6dd

    • SHA1

      d2889eb4b58327491e9e4a4e75cfa21b2e14a217

    • SHA256

      7fa62f163639b1b357fd4bd9e33d1c32e31f1b223d658967bd2280e5918f98bf

    • SHA512

      0f12ba9f8862c6622f13c52517d7a25f96fdf74dd79e9d7b80e6ddea1dfd5683db5941603566eec07c8c036565b3c60ebc2aa2e3f5ccbea723bd71d01585461f

    • SSDEEP

      98304:Z8qToBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:Z8qTe1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3144) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks