Overview

overview

10

Static

static

3

2024-12-12...ry.exe

windows7-x64

10

2024-12-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-12_0404db3d545ee16964912acc829de536_wannacry

  • Size

    3.6MB

  • Sample

    241212-r2z4fsyrfm

  • MD5

    0404db3d545ee16964912acc829de536

  • SHA1

    29fcd48b5ea234ca1179c2327ed0c66579fd6572

  • SHA256

    7af6d06c865c2a175b1ed4f5ccc8b482b236095796a2d73e40c53875d6723c81

  • SHA512

    4b1f55e72a9bcb4cfaeb8fa0d1fbe316c99236d4449d0fd0a3016b5dfaa86097d91144678c8f3bbff58fedc418fc6e84503a8a1ce4444fecfaf1b7e3d60c3346

  • SSDEEP

    12288:GebLgPlu+QhMbaIMu7L5NVErCA45J98kDsqRejlkmnxk6PdJDjm+Oaq:XbLgddQhfdmMSN8kIqRYoAdNLK

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-12_0404db3d545ee16964912acc829de536_wannacry

    • Size

      3.6MB

    • MD5

      0404db3d545ee16964912acc829de536

    • SHA1

      29fcd48b5ea234ca1179c2327ed0c66579fd6572

    • SHA256

      7af6d06c865c2a175b1ed4f5ccc8b482b236095796a2d73e40c53875d6723c81

    • SHA512

      4b1f55e72a9bcb4cfaeb8fa0d1fbe316c99236d4449d0fd0a3016b5dfaa86097d91144678c8f3bbff58fedc418fc6e84503a8a1ce4444fecfaf1b7e3d60c3346

    • SSDEEP

      12288:GebLgPlu+QhMbaIMu7L5NVErCA45J98kDsqRejlkmnxk6PdJDjm+Oaq:XbLgddQhfdmMSN8kIqRYoAdNLK

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3254) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks