Overview

overview

10

Static

static

3

2025-01-10...ry.exe

windows7-x64

10

2025-01-10...ry.exe

windows10-2004-x64

10

Resubmissions

10-01-2025 17:20

250110-vwnp1ssran 10

10-01-2025 17:19

250110-vv8zkazqfs 10

10-01-2025 12:28

250110-pnsq4stqbx 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-10_8f8fb40a1051d221d36afedc8e01a94b_wannacry

  • Size

    5.0MB

  • Sample

    250110-pnsq4stqbx

  • MD5

    8f8fb40a1051d221d36afedc8e01a94b

  • SHA1

    c2fbcd7e704d3051afee7ea369fcf266cec28958

  • SHA256

    eda5198147ac32f805c96e13ef2681625916f368dd688c7db313c19f96d64652

  • SHA512

    fa4c2b88aaea9bd997867c50909b87e45a4deae2183105846df8b2733e808550b1961b1dc1cb003a1ec18fc03ff191b1525e3d564041c6698752279550505e2a

  • SSDEEP

    24576:QbLguriKyMSirYbcMNgezQeQjG/D8kIqp+vbOSSqTPV:QnGMSPbcBuQej/d+TSqTd

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-10_8f8fb40a1051d221d36afedc8e01a94b_wannacry

    • Size

      5.0MB

    • MD5

      8f8fb40a1051d221d36afedc8e01a94b

    • SHA1

      c2fbcd7e704d3051afee7ea369fcf266cec28958

    • SHA256

      eda5198147ac32f805c96e13ef2681625916f368dd688c7db313c19f96d64652

    • SHA512

      fa4c2b88aaea9bd997867c50909b87e45a4deae2183105846df8b2733e808550b1961b1dc1cb003a1ec18fc03ff191b1525e3d564041c6698752279550505e2a

    • SSDEEP

      24576:QbLguriKyMSirYbcMNgezQeQjG/D8kIqp+vbOSSqTPV:QnGMSPbcBuQej/d+TSqTd

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3192) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks