Overview

overview

10

Static

static

3

2024-12-16...ry.exe

windows7-x64

10

2024-12-16...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-16_57102e8d352818daf25ccd21114683fe_wannacry

  • Size

    5.0MB

  • Sample

    241216-nzbrasyrcv

  • MD5

    57102e8d352818daf25ccd21114683fe

  • SHA1

    770a7e82ef772db79c0b7e96d7788a8828db3998

  • SHA256

    618e085de6c6b24cb50d0f886050eec6f703f489f11e5af47c0489394fc8f5e6

  • SHA512

    4a40aadb978401799df9d076eab7476209f962fd3137ca3d262cecf99d213b9a2d733a68ae102bec5a3c5b36e5e04719a02337356d7efe1596e9a45adf0359b8

  • SSDEEP

    6144:GE9l9ynqIYVTH5DgSg8ajldktM0XXrP2QhMV9qbBLIwYQuy8DLq1eNVDvMrHC+V:GebLgPlu+QhMbaIMu7L5NVErCA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-16_57102e8d352818daf25ccd21114683fe_wannacry

    • Size

      5.0MB

    • MD5

      57102e8d352818daf25ccd21114683fe

    • SHA1

      770a7e82ef772db79c0b7e96d7788a8828db3998

    • SHA256

      618e085de6c6b24cb50d0f886050eec6f703f489f11e5af47c0489394fc8f5e6

    • SHA512

      4a40aadb978401799df9d076eab7476209f962fd3137ca3d262cecf99d213b9a2d733a68ae102bec5a3c5b36e5e04719a02337356d7efe1596e9a45adf0359b8

    • SSDEEP

      6144:GE9l9ynqIYVTH5DgSg8ajldktM0XXrP2QhMV9qbBLIwYQuy8DLq1eNVDvMrHC+V:GebLgPlu+QhMbaIMu7L5NVErCA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3341) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks