Overview

overview

10

Static

static

3

2024-12-19...ry.exe

windows7-x64

10

2024-12-19...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-19_f2444bbfb11470d903fbb4ca85152b63_wannacry

  • Size

    5.0MB

  • Sample

    241219-qccfestlet

  • MD5

    f2444bbfb11470d903fbb4ca85152b63

  • SHA1

    43b7ed08819330f3ea8432dbf42ab5d26f2f3128

  • SHA256

    64e0d0a437cfca87dc88e4b04a0b2febc09b13900939a1c222412471d56e5c41

  • SHA512

    bb86e443a7228c1d0ddc263b512cdfd40aba2ddd0218d67ee81f590e8a07e8d9976aa6417f76f6f2cfd46d3b1df0fa22176edbcf9b66d708552492c398c57976

  • SSDEEP

    6144:GE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhMV9qbBLIwYQuy8DLq1e:GwbLgPluxQhMbaIMu7L5

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-19_f2444bbfb11470d903fbb4ca85152b63_wannacry

    • Size

      5.0MB

    • MD5

      f2444bbfb11470d903fbb4ca85152b63

    • SHA1

      43b7ed08819330f3ea8432dbf42ab5d26f2f3128

    • SHA256

      64e0d0a437cfca87dc88e4b04a0b2febc09b13900939a1c222412471d56e5c41

    • SHA512

      bb86e443a7228c1d0ddc263b512cdfd40aba2ddd0218d67ee81f590e8a07e8d9976aa6417f76f6f2cfd46d3b1df0fa22176edbcf9b66d708552492c398c57976

    • SSDEEP

      6144:GE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhMV9qbBLIwYQuy8DLq1e:GwbLgPluxQhMbaIMu7L5

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3183) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks