Overview

overview

10

Static

static

3

2024-12-15...ry.exe

windows7-x64

10

2024-12-15...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-15_b810a574d573a1f0a65548226326287e_wannacry

  • Size

    5.0MB

  • Sample

    241215-nkqlxasnes

  • MD5

    b810a574d573a1f0a65548226326287e

  • SHA1

    6949560b42ee9ea1798724e97a9c7e13554db5ae

  • SHA256

    6c572b6aff7c9f052e68de8d725857884df43849171790022602bd218c4dbcb4

  • SHA512

    5e51acc3bb3ecb0d19ae83d855e3f2e933e32faa63e7fd40f643b6a66d1d91157766ee6efb9ad2b2e3e494634bc44af32fef80128c17ad7286f564de56da663d

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdd1HkQo6SAARdhnvxJM0H9:yDqPoBhz1aRxcSUZk36SAEdhvxWa9

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-15_b810a574d573a1f0a65548226326287e_wannacry

    • Size

      5.0MB

    • MD5

      b810a574d573a1f0a65548226326287e

    • SHA1

      6949560b42ee9ea1798724e97a9c7e13554db5ae

    • SHA256

      6c572b6aff7c9f052e68de8d725857884df43849171790022602bd218c4dbcb4

    • SHA512

      5e51acc3bb3ecb0d19ae83d855e3f2e933e32faa63e7fd40f643b6a66d1d91157766ee6efb9ad2b2e3e494634bc44af32fef80128c17ad7286f564de56da663d

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdd1HkQo6SAARdhnvxJM0H9:yDqPoBhz1aRxcSUZk36SAEdhvxWa9

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3197) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks