wannacry | ccd095dfc1f347214f2b1af016cc52e5262aa5e28d69ae6710cb3e17d10fe112 | Triage

Sharing

General

Target

2024-12-23_c1a0a3b6df60acd804287e2ca7d72a66_wannacry
Size

3.4MB
Sample

241223-p7dfjazndv
MD5

c1a0a3b6df60acd804287e2ca7d72a66
SHA1

f2981249186e907fcbc81d5069d446129b32b28b
SHA256

ccd095dfc1f347214f2b1af016cc52e5262aa5e28d69ae6710cb3e17d10fe112
SHA512

da288be19f1561d73136fa4992c929b443475b5055f567edc81cee451e5ddcf495501e2352ca9e2b665afc714d9697ba6c9f37bcdd3c83abe5a979a9db930e7e
SSDEEP

49152:nQqMSPbcBVQej/1INRMAMEcaEau3R8yAH1plAU3x:QqPoBhz1aRM593R8yAVp2U3x

Score

10^/10

wannacry defense_evasion discovery ransomware worm

Malware Config

Targets

- Target
  
  2024-12-23_c1a0a3b6df60acd804287e2ca7d72a66_wannacry
- Size
  
  3.4MB
- MD5
  
  c1a0a3b6df60acd804287e2ca7d72a66
- SHA1
  
  f2981249186e907fcbc81d5069d446129b32b28b
- SHA256
  
  ccd095dfc1f347214f2b1af016cc52e5262aa5e28d69ae6710cb3e17d10fe112
- SHA512
  
  da288be19f1561d73136fa4992c929b443475b5055f567edc81cee451e5ddcf495501e2352ca9e2b665afc714d9697ba6c9f37bcdd3c83abe5a979a9db930e7e
- SSDEEP
  
  49152:nQqMSPbcBVQej/1INRMAMEcaEau3R8yAH1plAU3x:QqPoBhz1aRM593R8yAVp2U3x
Score

10^/10

wannacry defense_evasion discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Wannacry family
  wannacry
- Modifies file permissions
  discovery
- File and Directory Permissions Modification: Windows File and Directory Permissions Modification
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Windows File and Directory Permissions Modification

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydefense_evasiondiscoveryransomwareworm

behavioral2

wannacrydefense_evasiondiscoveryransomwareworm