Overview

overview

10

Static

static

3

2025-01-02...ry.exe

windows7-x64

10

2025-01-02...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-02_749408122ba1ce8bd22fbf3ac109fc6a_wannacry

  • Size

    5.0MB

  • Sample

    250102-phbweavkcr

  • MD5

    749408122ba1ce8bd22fbf3ac109fc6a

  • SHA1

    418cbdf0072ab84e1be7b7117b6113940838dc51

  • SHA256

    eb52124269c68c39a189b5c036b7a51fe498b58306c2b1ec520ed646276252e4

  • SHA512

    e9f67df4c4d023218e29cd0e8bd0ee43a31a9fb629090d4fad248ed85ce6d077386ff3c5e48bf631ac775d2da60c844bd6ca3ccd88e23f423f91ed5548b623bf

  • SSDEEP

    49152:onjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SOMEcaEau3R8yAH1plAH:Y8qPoBhz1aRxcSUDk36Sf93R8yAVp2H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-02_749408122ba1ce8bd22fbf3ac109fc6a_wannacry

    • Size

      5.0MB

    • MD5

      749408122ba1ce8bd22fbf3ac109fc6a

    • SHA1

      418cbdf0072ab84e1be7b7117b6113940838dc51

    • SHA256

      eb52124269c68c39a189b5c036b7a51fe498b58306c2b1ec520ed646276252e4

    • SHA512

      e9f67df4c4d023218e29cd0e8bd0ee43a31a9fb629090d4fad248ed85ce6d077386ff3c5e48bf631ac775d2da60c844bd6ca3ccd88e23f423f91ed5548b623bf

    • SSDEEP

      49152:onjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SOMEcaEau3R8yAH1plAH:Y8qPoBhz1aRxcSUDk36Sf93R8yAVp2H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3290) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks