Overview

overview

10

Static

static

3

2024-12-21...ry.exe

windows7-x64

10

2024-12-21...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-21_d0200e9b93e8a4d28c5d50c3dee59906_wannacry

  • Size

    5.0MB

  • Sample

    241221-mj4lpsxqhz

  • MD5

    d0200e9b93e8a4d28c5d50c3dee59906

  • SHA1

    07aa4e0c21252afdb96e98c10632ec89e9308054

  • SHA256

    eaaa39a574b53e6dbcb73c94232f69af02e5babd2a16525d701d072c43945565

  • SHA512

    de4c460cba13f7c9d8d807bb234d943b2c0935b38c3f3ff4bb6653e4328df65c37272c980f9b0c94be2ed0c6628d74034c78120bdd2a91537a859a87174b9914

  • SSDEEP

    49152:2nmMSPbcBV0+TSqTdX1HkQo6SAAc1PAME:ymPoBicSUDk36SAp1P5

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-21_d0200e9b93e8a4d28c5d50c3dee59906_wannacry

    • Size

      5.0MB

    • MD5

      d0200e9b93e8a4d28c5d50c3dee59906

    • SHA1

      07aa4e0c21252afdb96e98c10632ec89e9308054

    • SHA256

      eaaa39a574b53e6dbcb73c94232f69af02e5babd2a16525d701d072c43945565

    • SHA512

      de4c460cba13f7c9d8d807bb234d943b2c0935b38c3f3ff4bb6653e4328df65c37272c980f9b0c94be2ed0c6628d74034c78120bdd2a91537a859a87174b9914

    • SSDEEP

      49152:2nmMSPbcBV0+TSqTdX1HkQo6SAAc1PAME:ymPoBicSUDk36SAp1P5

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3170) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks