Overview

overview

10

Static

static

3

2024-12-18...ry.exe

windows7-x64

10

2024-12-18...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-18_780c5226b79a070d3b46e6c5efcd08f1_wannacry

  • Size

    5.0MB

  • Sample

    241218-q6qj5s1mby

  • MD5

    780c5226b79a070d3b46e6c5efcd08f1

  • SHA1

    005039f7cf2e99080cb23db8b52564f509f07e98

  • SHA256

    8570a87f1320fcea28e35c7fbcfa5d9c2b2d2e12249058eca855482ae624811e

  • SHA512

    b4451a361a75145d0c7d95cd53f0436e2d5f59755c340ccbd1cb62cac12a7500b209abdc509acd830bcda2164e44213f1faefd07eca87fd72055cce64e90dace

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:yDqPe1Cxcxk3ZAEUadzR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-18_780c5226b79a070d3b46e6c5efcd08f1_wannacry

    • Size

      5.0MB

    • MD5

      780c5226b79a070d3b46e6c5efcd08f1

    • SHA1

      005039f7cf2e99080cb23db8b52564f509f07e98

    • SHA256

      8570a87f1320fcea28e35c7fbcfa5d9c2b2d2e12249058eca855482ae624811e

    • SHA512

      b4451a361a75145d0c7d95cd53f0436e2d5f59755c340ccbd1cb62cac12a7500b209abdc509acd830bcda2164e44213f1faefd07eca87fd72055cce64e90dace

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:yDqPe1Cxcxk3ZAEUadzR8yc4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3117) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks