Overview

overview

10

Static

static

3

2025-01-02...ry.exe

windows7-x64

10

2025-01-02...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-02_f1aac2c725d09a235f6f34968d08a754_wannacry

  • Size

    5.0MB

  • Sample

    250102-pht2zs1qey

  • MD5

    f1aac2c725d09a235f6f34968d08a754

  • SHA1

    f5036032a2e11971ae40e40ede616cc515017d8e

  • SHA256

    049755b90ab60923eb3133c163116b654890362c2ef863129d2ef2f538583b52

  • SHA512

    dd235561454128b3cf4c1a348af00dccc3fa0c36eb543addd211af2b72a1ac29280e5e980d625ee015692d779fbcdaa2632614460845ed8dfecfcc73936214b6

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:yDqPoBhz1aRxcSUDk36SA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-02_f1aac2c725d09a235f6f34968d08a754_wannacry

    • Size

      5.0MB

    • MD5

      f1aac2c725d09a235f6f34968d08a754

    • SHA1

      f5036032a2e11971ae40e40ede616cc515017d8e

    • SHA256

      049755b90ab60923eb3133c163116b654890362c2ef863129d2ef2f538583b52

    • SHA512

      dd235561454128b3cf4c1a348af00dccc3fa0c36eb543addd211af2b72a1ac29280e5e980d625ee015692d779fbcdaa2632614460845ed8dfecfcc73936214b6

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:yDqPoBhz1aRxcSUDk36SA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3260) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks