Overview

overview

10

Static

static

3

2024-12-14...ry.exe

windows7-x64

10

2024-12-14...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-14_a29beb3a1dc7ad7441a999f331fe55f3_wannacry

  • Size

    5.0MB

  • Sample

    241214-qft5msvlbl

  • MD5

    a29beb3a1dc7ad7441a999f331fe55f3

  • SHA1

    a8965a8b34d7f3cbd32a86fd2954380eed40be89

  • SHA256

    524b0b81661859c4ac7c556ef930b1642c1cedf034be2ae4e10bbac074f2c168

  • SHA512

    cbb7116be8f977dbc722533680d4c08816d5f255d92feaffda3510309ed0d70e72217d66383031c1f6f06d2d00258b97f04a68024859cb408e9d8a28edc3d8bf

  • SSDEEP

    49152:QnsQqMSPbcBVQejoNRx+TSqTdX1HkQo6SAARdhnv:Q/qPoBh2RxcSUDk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-14_a29beb3a1dc7ad7441a999f331fe55f3_wannacry

    • Size

      5.0MB

    • MD5

      a29beb3a1dc7ad7441a999f331fe55f3

    • SHA1

      a8965a8b34d7f3cbd32a86fd2954380eed40be89

    • SHA256

      524b0b81661859c4ac7c556ef930b1642c1cedf034be2ae4e10bbac074f2c168

    • SHA512

      cbb7116be8f977dbc722533680d4c08816d5f255d92feaffda3510309ed0d70e72217d66383031c1f6f06d2d00258b97f04a68024859cb408e9d8a28edc3d8bf

    • SSDEEP

      49152:QnsQqMSPbcBVQejoNRx+TSqTdX1HkQo6SAARdhnv:Q/qPoBh2RxcSUDk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3147) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks