Overview

overview

10

Static

static

3

2024-12-21...ry.exe

windows7-x64

10

2024-12-21...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-21_545a86f9acd10665a02b9e10eda08753_wannacry

  • Size

    5.0MB

  • Sample

    241221-mvtwmsylaq

  • MD5

    545a86f9acd10665a02b9e10eda08753

  • SHA1

    f891834a67a5af27761aadc4de5b465ad20eb0f3

  • SHA256

    032100a8f8ec17c0b2a6603b937b89fd35e37a4e3fa80a84474dbfd46431bbdc

  • SHA512

    e0d6ddd7f547386e9d89c934e5fea5dd51ac57a302c5b0bd64710e19a185f973dd4391100f9b559ec8277e08f8346835c087d36ed75ac3a648347f5d4c41a4d8

  • SSDEEP

    49152:+nFQeMSPbcBVQkINRx+TSqTdX1HkQo6SAARdhnvP:qeePoBpaRxcSUDk36SAEdhvP

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-21_545a86f9acd10665a02b9e10eda08753_wannacry

    • Size

      5.0MB

    • MD5

      545a86f9acd10665a02b9e10eda08753

    • SHA1

      f891834a67a5af27761aadc4de5b465ad20eb0f3

    • SHA256

      032100a8f8ec17c0b2a6603b937b89fd35e37a4e3fa80a84474dbfd46431bbdc

    • SHA512

      e0d6ddd7f547386e9d89c934e5fea5dd51ac57a302c5b0bd64710e19a185f973dd4391100f9b559ec8277e08f8346835c087d36ed75ac3a648347f5d4c41a4d8

    • SSDEEP

      49152:+nFQeMSPbcBVQkINRx+TSqTdX1HkQo6SAARdhnvP:qeePoBpaRxcSUDk36SAEdhvP

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3202) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks