wannacry | 3a41fa334f12854deb9e9fb38f90f93c3ec731bdad7b810f3a461fc319ef0c1d | Triage

Sharing

General

Target

3a41fa334f12854deb9e9fb38f90f93c3ec731bdad7b810f3a461fc319ef0c1dN.exe
Size

5.0MB
Sample

241219-bfp4cszmcx
MD5

a4b3ba6031f38c5277320bfece936840
SHA1

628df3dd85b8c4ca4b67e68711f116229967f6bd
SHA256

3a41fa334f12854deb9e9fb38f90f93c3ec731bdad7b810f3a461fc319ef0c1d
SHA512

e6139125aff256febf3d3147fa0bbd85e660c04925a954505110f9726dda2f4ce78a8bed8c30910ed6ca28a14f7d684314147aadde8441783f78f290a444385b
SSDEEP

12288:e1bLgmluCti62ybaIMu7L5NVErCA4z2g6rTcbckP:QbLgurihdmMSirYbc

Score

10^/10

wannacry discovery ransomware worm

Malware Config

Targets

- Target
  
  3a41fa334f12854deb9e9fb38f90f93c3ec731bdad7b810f3a461fc319ef0c1dN.exe
- Size
  
  5.0MB
- MD5
  
  a4b3ba6031f38c5277320bfece936840
- SHA1
  
  628df3dd85b8c4ca4b67e68711f116229967f6bd
- SHA256
  
  3a41fa334f12854deb9e9fb38f90f93c3ec731bdad7b810f3a461fc319ef0c1d
- SHA512
  
  e6139125aff256febf3d3147fa0bbd85e660c04925a954505110f9726dda2f4ce78a8bed8c30910ed6ca28a14f7d684314147aadde8441783f78f290a444385b
- SSDEEP
  
  12288:e1bLgmluCti62ybaIMu7L5NVErCA4z2g6rTcbckP:QbLgurihdmMSirYbc
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Wannacry family
  wannacry
- Contacts a large (2260) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm