Overview

overview

10

Static

static

3

2024-12-28...ry.exe

windows7-x64

10

2024-12-28...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-28_1f69364cad8dfe98e4c3d9527b6bc48a_wannacry

  • Size

    3.6MB

  • Sample

    241228-cwn2nstqbx

  • MD5

    1f69364cad8dfe98e4c3d9527b6bc48a

  • SHA1

    78548f84f076405aa2984146083a5bd23fa5fada

  • SHA256

    bafbf15f077a70d8ad94702da773bbe8f714381f9e54e7f219645132529c474c

  • SHA512

    b5a835f4b9ee1dd7ea3d403fca7b665952b24a3cb608e9070bfc7edbcf8d1a00c3f036818aa0ea341086a9bc3ef3e88eade001c7d5284db47294b6b2f950dcb8

  • SSDEEP

    49152:2nAQqMSPbcBVQejJ+TSqTdX1HkQ5xJM0H9PAMEcaEau3R8yAH1plAHI:yDqPoBhFcSUDk4xWa9P593R8yAVp2HI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-28_1f69364cad8dfe98e4c3d9527b6bc48a_wannacry

    • Size

      3.6MB

    • MD5

      1f69364cad8dfe98e4c3d9527b6bc48a

    • SHA1

      78548f84f076405aa2984146083a5bd23fa5fada

    • SHA256

      bafbf15f077a70d8ad94702da773bbe8f714381f9e54e7f219645132529c474c

    • SHA512

      b5a835f4b9ee1dd7ea3d403fca7b665952b24a3cb608e9070bfc7edbcf8d1a00c3f036818aa0ea341086a9bc3ef3e88eade001c7d5284db47294b6b2f950dcb8

    • SSDEEP

      49152:2nAQqMSPbcBVQejJ+TSqTdX1HkQ5xJM0H9PAMEcaEau3R8yAH1plAHI:yDqPoBhFcSUDk4xWa9P593R8yAVp2HI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3318) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks