Overview

overview

10

Static

static

3

2024-12-12...ry.exe

windows7-x64

10

2024-12-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-12_714923e33593306391523aca70a1fd09_wannacry

  • Size

    5.0MB

  • Sample

    241212-nzt8mssrgw

  • MD5

    714923e33593306391523aca70a1fd09

  • SHA1

    06a7f0a7464523c764123983cd6b224028dc7f01

  • SHA256

    4f4dca8ac3dc775f14d258163c498b3e89bc727a4ebb0a10728a3b526d011636

  • SHA512

    63c72525a99d060ee57145cae6517f8f2a1a5f5cd5f70d17b391f382ba6beb45a051dadb6f169b7cb4b9b73b44a40705f817607464b716a27d901658901533f9

  • SSDEEP

    49152:XnAQqMSPbcBVQej/1IkvxJM0H9PAMEcaEau3R8yAH1plAH:XDqPoBhz1rxWa9P593R8yAVp2H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-12_714923e33593306391523aca70a1fd09_wannacry

    • Size

      5.0MB

    • MD5

      714923e33593306391523aca70a1fd09

    • SHA1

      06a7f0a7464523c764123983cd6b224028dc7f01

    • SHA256

      4f4dca8ac3dc775f14d258163c498b3e89bc727a4ebb0a10728a3b526d011636

    • SHA512

      63c72525a99d060ee57145cae6517f8f2a1a5f5cd5f70d17b391f382ba6beb45a051dadb6f169b7cb4b9b73b44a40705f817607464b716a27d901658901533f9

    • SSDEEP

      49152:XnAQqMSPbcBVQej/1IkvxJM0H9PAMEcaEau3R8yAH1plAH:XDqPoBhz1rxWa9P593R8yAVp2H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3299) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks