Overview

overview

10

Static

static

3

2024-12-14...ry.exe

windows7-x64

10

2024-12-14...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-14_9717a56730cde6da2edc69142193ef64_wannacry

  • Size

    3.6MB

  • Sample

    241214-ecjc7atlaw

  • MD5

    9717a56730cde6da2edc69142193ef64

  • SHA1

    7ca81a09bce4c6f961ede44ff7b8cb6ef2ed66f8

  • SHA256

    929dd133d5c4049d1f26438cc266b9d4adb0c9d82cb6ff764f33da4124cba9b7

  • SHA512

    4ba23fff73659cb438d47be1b4a9ad9053f3643b67a20e9c5759a09937f65b44fb80656eb3f26722a6f7807c5cd8849cb2cf6ee044cbabe0f9496b7136de2d2b

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:yDqPe1Cxcxk3ZAEUadzR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-14_9717a56730cde6da2edc69142193ef64_wannacry

    • Size

      3.6MB

    • MD5

      9717a56730cde6da2edc69142193ef64

    • SHA1

      7ca81a09bce4c6f961ede44ff7b8cb6ef2ed66f8

    • SHA256

      929dd133d5c4049d1f26438cc266b9d4adb0c9d82cb6ff764f33da4124cba9b7

    • SHA512

      4ba23fff73659cb438d47be1b4a9ad9053f3643b67a20e9c5759a09937f65b44fb80656eb3f26722a6f7807c5cd8849cb2cf6ee044cbabe0f9496b7136de2d2b

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:yDqPe1Cxcxk3ZAEUadzR8yc4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3145) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks