Resubmissions

11-01-2025 15:21

250111-srlnraslbt 3

11-01-2025 14:44

250111-r4dcga1qax 10

General

  • Target

    2025-01-11_334bf1f66d2e7f9cf677ad41ccdfdd68_wannacry

  • Size

    5.0MB

  • Sample

    250111-r4dcga1qax

  • MD5

    334bf1f66d2e7f9cf677ad41ccdfdd68

  • SHA1

    1a3472aad239077b465fd7b97ac8f5e7776f3519

  • SHA256

    abaea1a4bbb53fdfbe263d3a18ba979e25f71aa8698cdc7068de7fe261c4755f

  • SHA512

    1a66801fabc736e5b9c86b8f40a5b299b79a691dfdefeb88d6942d1d8f9572806e9577693eb9a946d8e0c75134537bf9037116302ff287847945496e308ea7fa

  • SSDEEP

    12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DEhAvVLJAmdQ:2bLgddQhfdmMSirYbcMNgef0vhAdmv

Malware Config

Targets

    • Target

      2025-01-11_334bf1f66d2e7f9cf677ad41ccdfdd68_wannacry

    • Size

      5.0MB

    • MD5

      334bf1f66d2e7f9cf677ad41ccdfdd68

    • SHA1

      1a3472aad239077b465fd7b97ac8f5e7776f3519

    • SHA256

      abaea1a4bbb53fdfbe263d3a18ba979e25f71aa8698cdc7068de7fe261c4755f

    • SHA512

      1a66801fabc736e5b9c86b8f40a5b299b79a691dfdefeb88d6942d1d8f9572806e9577693eb9a946d8e0c75134537bf9037116302ff287847945496e308ea7fa

    • SSDEEP

      12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DEhAvVLJAmdQ:2bLgddQhfdmMSirYbcMNgef0vhAdmv

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Wannacry family

    • Contacts a large (3348) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks