Overview

overview

10

Static

static

3

2024-12-18...ry.exe

windows7-x64

10

2024-12-18...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-18_3c620a41d7538118181e872340c388ea_wannacry

  • Size

    5.0MB

  • Sample

    241218-q3mn3s1lay

  • MD5

    3c620a41d7538118181e872340c388ea

  • SHA1

    3da7b1159862bb7922e43de1361c6d4a72f7bd77

  • SHA256

    b618f24c991a75fe6ae3057af2b6b544046ab0434fa7c57a5b7eded51d752e29

  • SHA512

    f5efeb4aee78c9d9f7fba59ad0a87e022371394b80815320645af395055bef255a3fd0ef7ed54b89ba59ec2ec3c0294f4948814ab937ce7f0922dbbec6696167

  • SSDEEP

    24576:QbLguriIfEcQdIBrYbcMNgef0QeQjG/D8kIqRYoAdNLKZnV:QnpENbcBVQej/1INm

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-18_3c620a41d7538118181e872340c388ea_wannacry

    • Size

      5.0MB

    • MD5

      3c620a41d7538118181e872340c388ea

    • SHA1

      3da7b1159862bb7922e43de1361c6d4a72f7bd77

    • SHA256

      b618f24c991a75fe6ae3057af2b6b544046ab0434fa7c57a5b7eded51d752e29

    • SHA512

      f5efeb4aee78c9d9f7fba59ad0a87e022371394b80815320645af395055bef255a3fd0ef7ed54b89ba59ec2ec3c0294f4948814ab937ce7f0922dbbec6696167

    • SSDEEP

      24576:QbLguriIfEcQdIBrYbcMNgef0QeQjG/D8kIqRYoAdNLKZnV:QnpENbcBVQej/1INm

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (1986) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks