Resubmissions

16-12-2024 12:21

241216-pjry1szpay 10

16-12-2024 12:18

241216-pg2qfaznf1 10

16-12-2024 12:06

241216-n93b1a1kcr 10

General

  • Target

    2024-12-16_ca4ce7114be6f14792cc77f2997fc7e6_wannacry

  • Size

    5.0MB

  • Sample

    241216-pjry1szpay

  • MD5

    ca4ce7114be6f14792cc77f2997fc7e6

  • SHA1

    f4ca2bdcaed8ccaf20536cdfce85b338b74ebf19

  • SHA256

    b6e0541f88b2f91f92b7bcb4928db794f406e822802b1516b804fb1e2933e75e

  • SHA512

    d92e534f9ca67397fc17b9b67dd7e3fcca3d8be81d8e4d6f6da5ccc2dd6bb47ac5aef3f78ab274b1a08ca70e2db0dff8944e0e9a0e85eb657b09bfeac3f1864c

  • SSDEEP

    12288:GwbLgPluxQhMbaIMu7L5NVErCA4z2g6rTcbckP:VbLgdeQhfdmMSirYbc

Malware Config

Targets

    • Target

      2024-12-16_ca4ce7114be6f14792cc77f2997fc7e6_wannacry

    • Size

      5.0MB

    • MD5

      ca4ce7114be6f14792cc77f2997fc7e6

    • SHA1

      f4ca2bdcaed8ccaf20536cdfce85b338b74ebf19

    • SHA256

      b6e0541f88b2f91f92b7bcb4928db794f406e822802b1516b804fb1e2933e75e

    • SHA512

      d92e534f9ca67397fc17b9b67dd7e3fcca3d8be81d8e4d6f6da5ccc2dd6bb47ac5aef3f78ab274b1a08ca70e2db0dff8944e0e9a0e85eb657b09bfeac3f1864c

    • SSDEEP

      12288:GwbLgPluxQhMbaIMu7L5NVErCA4z2g6rTcbckP:VbLgdeQhfdmMSirYbc

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Wannacry family

    • Contacts a large (4178) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v15

Tasks