wannacry | 141d4180f39fa7731a5be34aa588f91a2bf905d6e073ac54eeca3e574ddffcdb | Triage

Sharing

General

Target

141d4180f39fa7731a5be34aa588f91a2bf905d6e073ac54eeca3e574ddffcdb.exe
Size

2.2MB
Sample

250102-dacl7a1ram
MD5

dd4a18ed1fbda8c78f9dd18cc951d492
SHA1

39321467637f8ca0717ef099a48eaa14245bc5ce
SHA256

141d4180f39fa7731a5be34aa588f91a2bf905d6e073ac54eeca3e574ddffcdb
SHA512

7b6704aa34392b2eccc45e1eba78223f34c89667c4beeef0a049d529dd873bccb42ccf8a4d87a7d24d03838ec900b288d142b9919865699d1a391bfec9f9579f
SSDEEP

49152:QnsEMSPbcBVQej/1INRFSqTdX1HkQo6SAARdhnvl:QfPoBhz1aRFSUDk36SAEdhvl

Score

10^/10

wannacry discovery ransomware worm

Malware Config

Targets

- Target
  
  141d4180f39fa7731a5be34aa588f91a2bf905d6e073ac54eeca3e574ddffcdb.exe
- Size
  
  2.2MB
- MD5
  
  dd4a18ed1fbda8c78f9dd18cc951d492
- SHA1
  
  39321467637f8ca0717ef099a48eaa14245bc5ce
- SHA256
  
  141d4180f39fa7731a5be34aa588f91a2bf905d6e073ac54eeca3e574ddffcdb
- SHA512
  
  7b6704aa34392b2eccc45e1eba78223f34c89667c4beeef0a049d529dd873bccb42ccf8a4d87a7d24d03838ec900b288d142b9919865699d1a391bfec9f9579f
- SSDEEP
  
  49152:QnsEMSPbcBVQej/1INRFSqTdX1HkQo6SAARdhnvl:QfPoBhz1aRFSUDk36SAEdhvl
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Wannacry family
  wannacry
- Contacts a large (2429) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm