Overview

overview

10

Static

static

3

2025-01-08...ry.exe

windows7-x64

10

2025-01-08...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-08_80a3b0e1be457b61423e70189846e2d0_wannacry

  • Size

    3.6MB

  • Sample

    250108-lfrmastphw

  • MD5

    80a3b0e1be457b61423e70189846e2d0

  • SHA1

    b88158935108c040f768861fe3bd14e6b3111b04

  • SHA256

    9c8d75e45761108fbcb0fa52dfa69197987f5ebc63546cd85e5b8d7d9828290f

  • SHA512

    f04339e5cd21c2545ff2af792bb986056bd7963f27f832b0b34da571be8fce93a36d162a1e5e063c588f1826599c5e097d69c9cbc919c9f9a3351f2a7938f8aa

  • SSDEEP

    24576:XbLgddQhfdmMSirYbcMNge71cPXTZd1+IE8SBk4GhGP5qfl8J0ax:XnAQqMSPbcBu1cPoykP5qN8yax

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-08_80a3b0e1be457b61423e70189846e2d0_wannacry

    • Size

      3.6MB

    • MD5

      80a3b0e1be457b61423e70189846e2d0

    • SHA1

      b88158935108c040f768861fe3bd14e6b3111b04

    • SHA256

      9c8d75e45761108fbcb0fa52dfa69197987f5ebc63546cd85e5b8d7d9828290f

    • SHA512

      f04339e5cd21c2545ff2af792bb986056bd7963f27f832b0b34da571be8fce93a36d162a1e5e063c588f1826599c5e097d69c9cbc919c9f9a3351f2a7938f8aa

    • SSDEEP

      24576:XbLgddQhfdmMSirYbcMNge71cPXTZd1+IE8SBk4GhGP5qfl8J0ax:XnAQqMSPbcBu1cPoykP5qN8yax

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3312) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks