Overview

overview

10

Static

static

3

2024-12-15...ry.exe

windows7-x64

10

2024-12-15...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-15_fef6c85cbbbf089afdc5a1f81d3aeed2_wannacry

  • Size

    5.0MB

  • Sample

    241215-pbkvqsvqhq

  • MD5

    fef6c85cbbbf089afdc5a1f81d3aeed2

  • SHA1

    c25bd9d841963777cae22ffc33ad6059bc8f79fb

  • SHA256

    93ad8ad3cd755a41cb3766331e566301210909380bbcb0d5a35f1965a149516d

  • SHA512

    feb17e188dfe9ee281fdc716c31bfe37708b8d761df34b88ca68055a2d1bfce2dc4db60dfc02ec4528f1fd2c469409e43db60772aa13509effb30922f4dc733e

  • SSDEEP

    98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:XDqPe1Cxcxk3ZAEUadzR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-15_fef6c85cbbbf089afdc5a1f81d3aeed2_wannacry

    • Size

      5.0MB

    • MD5

      fef6c85cbbbf089afdc5a1f81d3aeed2

    • SHA1

      c25bd9d841963777cae22ffc33ad6059bc8f79fb

    • SHA256

      93ad8ad3cd755a41cb3766331e566301210909380bbcb0d5a35f1965a149516d

    • SHA512

      feb17e188dfe9ee281fdc716c31bfe37708b8d761df34b88ca68055a2d1bfce2dc4db60dfc02ec4528f1fd2c469409e43db60772aa13509effb30922f4dc733e

    • SSDEEP

      98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:XDqPe1Cxcxk3ZAEUadzR8yc4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (2964) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks