Overview

overview

10

Static

static

3

2024-12-25...ry.exe

windows7-x64

10

2024-12-25...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-12-25_03423b4c9177ac6eab8f784db635883e_wannacry

  • Size

    5.0MB

  • Sample

    241225-mxyydasman

  • MD5

    03423b4c9177ac6eab8f784db635883e

  • SHA1

    b2f5867fc93ea96e4d9b68dedca6fd677eb67dbe

  • SHA256

    491c9e7e5471d9242111b3246fab793a094c9f0b0a5e591d619215884ec77126

  • SHA512

    f285c96cd76b70c2960aeec5613e721d9400d7103f4b7ccb727237895013dbace4c4a5523a6bc69541adf410149c74aeb6f04294552624138cc35a9e37fd12c7

  • SSDEEP

    98304:0DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HjtA:0DqPe1Cxcxk3ZAEUadzR8yc4Hj

Score
10/10
wannacrydiscoveryransomwarespywarestealerworm

Malware Config

Targets

    • Target

      2024-12-25_03423b4c9177ac6eab8f784db635883e_wannacry

    • Size

      5.0MB

    • MD5

      03423b4c9177ac6eab8f784db635883e

    • SHA1

      b2f5867fc93ea96e4d9b68dedca6fd677eb67dbe

    • SHA256

      491c9e7e5471d9242111b3246fab793a094c9f0b0a5e591d619215884ec77126

    • SHA512

      f285c96cd76b70c2960aeec5613e721d9400d7103f4b7ccb727237895013dbace4c4a5523a6bc69541adf410149c74aeb6f04294552624138cc35a9e37fd12c7

    • SSDEEP

      98304:0DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HjtA:0DqPe1Cxcxk3ZAEUadzR8yc4Hj

    Score
    10/10
    wannacrydiscoveryransomwarespywarestealerworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3123) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks