Overview

overview

10

Static

static

3

2025-01-11...ry.exe

windows7-x64

10

2025-01-11...ry.exe

windows10-2004-x64

10

Resubmissions

11-01-2025 15:27

250111-svz1jsvmcl 3

11-01-2025 14:49

250111-r63edatqgm 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-11_e6913dea6b19f7d4ed06737268cd6530_wannacry

  • Size

    5.0MB

  • Sample

    250111-r63edatqgm

  • MD5

    e6913dea6b19f7d4ed06737268cd6530

  • SHA1

    8f766c40ff82a724f990bfeec403e956106ea76e

  • SHA256

    27e6855e7541b7f4c6363c1a119be5f339e571d8e34fa3a250e8fb8d185aa201

  • SHA512

    62bef30c44f5386626dfc9283818483538d66dce21d9e1598297567c860cea2b98a02a01aa45b3fcc6108da3e3318412d62aa86fe9ac1c139a6fa08acdce69bc

  • SSDEEP

    49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAR:Z8qPoBhz1aRxcSUDk36SAE

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-11_e6913dea6b19f7d4ed06737268cd6530_wannacry

    • Size

      5.0MB

    • MD5

      e6913dea6b19f7d4ed06737268cd6530

    • SHA1

      8f766c40ff82a724f990bfeec403e956106ea76e

    • SHA256

      27e6855e7541b7f4c6363c1a119be5f339e571d8e34fa3a250e8fb8d185aa201

    • SHA512

      62bef30c44f5386626dfc9283818483538d66dce21d9e1598297567c860cea2b98a02a01aa45b3fcc6108da3e3318412d62aa86fe9ac1c139a6fa08acdce69bc

    • SSDEEP

      49152:VnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAR:Z8qPoBhz1aRxcSUDk36SAE

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3229) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks