Overview

overview

10

Static

static

3

2024-12-28...ry.exe

windows7-x64

10

2024-12-28...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-28_9d93291540884678aafc3c17e7be5eb8_wannacry

  • Size

    5.0MB

  • Sample

    241228-qnt5lsynbl

  • MD5

    9d93291540884678aafc3c17e7be5eb8

  • SHA1

    628187a79e96848ab0667aa9cf0b8394c78fdea0

  • SHA256

    be0d17a91ce084ebc76813f5d9572fee9662d460644305150fa6bb95d1404744

  • SHA512

    8e4436c87049572c6f20d3da624ba67256e21145c0fb7e4fb506e1739ade6edd0d257807259e5aa695a3aee6882ce8f23c4595ca9529eabf1708066af08bcfe7

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp:yDqPe1Cxcxk3ZAEUadzR8yc

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-12-28_9d93291540884678aafc3c17e7be5eb8_wannacry

    • Size

      5.0MB

    • MD5

      9d93291540884678aafc3c17e7be5eb8

    • SHA1

      628187a79e96848ab0667aa9cf0b8394c78fdea0

    • SHA256

      be0d17a91ce084ebc76813f5d9572fee9662d460644305150fa6bb95d1404744

    • SHA512

      8e4436c87049572c6f20d3da624ba67256e21145c0fb7e4fb506e1739ade6edd0d257807259e5aa695a3aee6882ce8f23c4595ca9529eabf1708066af08bcfe7

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp:yDqPe1Cxcxk3ZAEUadzR8yc

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3292) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks