Overview

overview

10

Static

static

3

2024-12-17...ry.exe

windows7-x64

10

2024-12-17...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-17_08ae201b12a7d2bb29cf93421bb1dba7_wannacry

  • Size

    5.0MB

  • Sample

    241217-metwpsxjfz

  • MD5

    08ae201b12a7d2bb29cf93421bb1dba7

  • SHA1

    35b604d4928bd85b476f1519930eda78b8d47e35

  • SHA256

    0149b89ed411eaed0b37ed3a32a87c14603de1c68328064c90144b3a20284a43

  • SHA512

    8f0d2ae8bcea25c335c461af6a4be0d36d094db397b901e5b36754ad51e844bcff32a69b8d0f7f5ac0dc3c05d558a0a58662922d934e66d1691e71d469e1b826

  • SSDEEP

    12288:GwbLgPluxQhMbaIMu7L5NVErCA4z2g6rTcbckPU8290:VbLgdeQhfdmMSirYbcMN

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-17_08ae201b12a7d2bb29cf93421bb1dba7_wannacry

    • Size

      5.0MB

    • MD5

      08ae201b12a7d2bb29cf93421bb1dba7

    • SHA1

      35b604d4928bd85b476f1519930eda78b8d47e35

    • SHA256

      0149b89ed411eaed0b37ed3a32a87c14603de1c68328064c90144b3a20284a43

    • SHA512

      8f0d2ae8bcea25c335c461af6a4be0d36d094db397b901e5b36754ad51e844bcff32a69b8d0f7f5ac0dc3c05d558a0a58662922d934e66d1691e71d469e1b826

    • SSDEEP

      12288:GwbLgPluxQhMbaIMu7L5NVErCA4z2g6rTcbckPU8290:VbLgdeQhfdmMSirYbcMN

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3297) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks