Overview

overview

10

Static

static

3

2024-12-30...ry.exe

windows7-x64

10

2024-12-30...ry.exe

windows10-2004-x64

10

Resubmissions

01-01-2025 20:14

250101-y1bsssvjhl 10

30-12-2024 10:33

241230-ml2vwsxmgw 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-30_d24e01279e0e97c3480d2596976acf0a_wannacry

  • Size

    5.0MB

  • Sample

    250101-y1bsssvjhl

  • MD5

    d24e01279e0e97c3480d2596976acf0a

  • SHA1

    13993673bf933d5e2304e6936d7f3851844c36c7

  • SHA256

    3e315a77d96b2acedda233b126f376be5e71ac43d4d5ae13d944266ac328222a

  • SHA512

    aca8580987ef75f34d5f091f5e7399069c9359f7e02e793cab696ca3d10215b97604bb7cab880ede0e3f085b7e6baec97871b3f0d93cad2c5a879e571556a4df

  • SSDEEP

    98304:e8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HXD527BWG:e8qPe1Cxcxk3ZAEUadzR8yc4HXVQBWG

Score
10/10
wannacrydiscoveryransomwarespywarestealerworm

Malware Config

Targets

    • Target

      2024-12-30_d24e01279e0e97c3480d2596976acf0a_wannacry

    • Size

      5.0MB

    • MD5

      d24e01279e0e97c3480d2596976acf0a

    • SHA1

      13993673bf933d5e2304e6936d7f3851844c36c7

    • SHA256

      3e315a77d96b2acedda233b126f376be5e71ac43d4d5ae13d944266ac328222a

    • SHA512

      aca8580987ef75f34d5f091f5e7399069c9359f7e02e793cab696ca3d10215b97604bb7cab880ede0e3f085b7e6baec97871b3f0d93cad2c5a879e571556a4df

    • SSDEEP

      98304:e8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HXD527BWG:e8qPe1Cxcxk3ZAEUadzR8yc4HXVQBWG

    Score
    10/10
    wannacrydiscoveryransomwarespywarestealerworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (22270) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks