Overview

overview

10

Static

static

3

2024-12-28...ry.exe

windows7-x64

10

2024-12-28...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-28_d58831eed091ad3b9557050ca17938da_wannacry

  • Size

    5.0MB

  • Sample

    241228-q1aazaykat

  • MD5

    d58831eed091ad3b9557050ca17938da

  • SHA1

    0b2b888225ee436e0b31f6c6592f6eeb4640900e

  • SHA256

    de1d9df9bc22aadc49fac4585339f7cafa4f82d53065c41720752fbd5e77092b

  • SHA512

    652c7db33a616c9834c84e5816f7ff6ffbb7a129b3de0e61aa5cf7f3ac3cd1f89132616177e90488fad2fee8acf4b4091ca8f7cd043fce5e0ac2fcd74059e96a

  • SSDEEP

    6144:GE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhM:GwbLgPluxQhM

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-28_d58831eed091ad3b9557050ca17938da_wannacry

    • Size

      5.0MB

    • MD5

      d58831eed091ad3b9557050ca17938da

    • SHA1

      0b2b888225ee436e0b31f6c6592f6eeb4640900e

    • SHA256

      de1d9df9bc22aadc49fac4585339f7cafa4f82d53065c41720752fbd5e77092b

    • SHA512

      652c7db33a616c9834c84e5816f7ff6ffbb7a129b3de0e61aa5cf7f3ac3cd1f89132616177e90488fad2fee8acf4b4091ca8f7cd043fce5e0ac2fcd74059e96a

    • SSDEEP

      6144:GE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhM:GwbLgPluxQhM

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3282) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks