Overview

overview

10

Static

static

3

2024-12-20...ry.exe

windows7-x64

10

2024-12-20...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-20_88146097ec244928a99b08ad31a5f8db_wannacry

  • Size

    5.0MB

  • Sample

    241220-mwwrmavmdz

  • MD5

    88146097ec244928a99b08ad31a5f8db

  • SHA1

    f7e4198d2d155c8ef4733f24648369a61a2e2cdb

  • SHA256

    d339b420ad9f5fd2fd2015d3cca66f58fde793dcb71b66f94f1eff0c16f6f578

  • SHA512

    72348ff500e116c9f5992dea8fb6e27c4112bd31c634d1e9b5b8c2b4a88c2be6520bfe40b842046ee2099726321f109146c4e23a18e0630c27333ec65851d9a5

  • SSDEEP

    49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARyhnv:Z8qPoBhz1aRxcSUDk36SAEyhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-20_88146097ec244928a99b08ad31a5f8db_wannacry

    • Size

      5.0MB

    • MD5

      88146097ec244928a99b08ad31a5f8db

    • SHA1

      f7e4198d2d155c8ef4733f24648369a61a2e2cdb

    • SHA256

      d339b420ad9f5fd2fd2015d3cca66f58fde793dcb71b66f94f1eff0c16f6f578

    • SHA512

      72348ff500e116c9f5992dea8fb6e27c4112bd31c634d1e9b5b8c2b4a88c2be6520bfe40b842046ee2099726321f109146c4e23a18e0630c27333ec65851d9a5

    • SSDEEP

      49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARyhnv:Z8qPoBhz1aRxcSUDk36SAEyhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3283) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks