Overview

overview

10

Static

static

3

2024-12-16...ry.exe

windows7-x64

10

2024-12-16...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-16_c9fe3d3a36b93fbefc4169bcb8d71077_wannacry

  • Size

    2.2MB

  • Sample

    241216-e4a6wswjgq

  • MD5

    c9fe3d3a36b93fbefc4169bcb8d71077

  • SHA1

    aeaa401cc75be20cffc6f66f0ab7f5bc14037f4a

  • SHA256

    c0c9da6c5abf1d032cb6279661211dfed4dff93aed4424b7563045825c03dac7

  • SHA512

    25c791f6b749b85c06df82f016b158b622b36f2ac45fddfb5353afd0856c7e9ddc5b45bbc0cc99d90c868691c64bfa92c5bbda53f62f8324a6c7968e04616f43

  • SSDEEP

    6144:eE9l9ynRIYVTH5DgSgNajldktM0XXrCIai62XVIwYQuy8DLq1eN:e1bLgmluCti62lIMu7L5N

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-16_c9fe3d3a36b93fbefc4169bcb8d71077_wannacry

    • Size

      2.2MB

    • MD5

      c9fe3d3a36b93fbefc4169bcb8d71077

    • SHA1

      aeaa401cc75be20cffc6f66f0ab7f5bc14037f4a

    • SHA256

      c0c9da6c5abf1d032cb6279661211dfed4dff93aed4424b7563045825c03dac7

    • SHA512

      25c791f6b749b85c06df82f016b158b622b36f2ac45fddfb5353afd0856c7e9ddc5b45bbc0cc99d90c868691c64bfa92c5bbda53f62f8324a6c7968e04616f43

    • SSDEEP

      6144:eE9l9ynRIYVTH5DgSgNajldktM0XXrCIai62XVIwYQuy8DLq1eN:e1bLgmluCti62lIMu7L5N

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3247) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks