Resubmissions

11-01-2025 15:28

250111-swh4essmcw 3

11-01-2025 14:48

250111-r6kvbs1qev 10

General

  • Target

    2025-01-11_d5a603177556d0d5c8b28e1fe51ffbdc_wannacry

  • Size

    5.0MB

  • Sample

    250111-r6kvbs1qev

  • MD5

    d5a603177556d0d5c8b28e1fe51ffbdc

  • SHA1

    e19fb8f3a199a603f88f0b7fd327c8d678546bfa

  • SHA256

    9643097539e14befaecab8227ceeac1e533b0a94b921e0848b5f5cf92f518286

  • SHA512

    f1008171e22fbe298edcb27bf9a9fe5a5a4656dc2595f1eb0d243790c0a9b74cf64ab31c287bf3762676a027fe3536fae6df868b5cf56fd98996427d1aa98b7e

  • SSDEEP

    49152:8nQQqMSPbcBVQejIkQo6SArf0XdX63DE4JUJn0EF9a4AhAU+LGI7QOZ4HDX:czqPoBhUk36SAQx6Wf9AZHz

Malware Config

Targets

    • Target

      2025-01-11_d5a603177556d0d5c8b28e1fe51ffbdc_wannacry

    • Size

      5.0MB

    • MD5

      d5a603177556d0d5c8b28e1fe51ffbdc

    • SHA1

      e19fb8f3a199a603f88f0b7fd327c8d678546bfa

    • SHA256

      9643097539e14befaecab8227ceeac1e533b0a94b921e0848b5f5cf92f518286

    • SHA512

      f1008171e22fbe298edcb27bf9a9fe5a5a4656dc2595f1eb0d243790c0a9b74cf64ab31c287bf3762676a027fe3536fae6df868b5cf56fd98996427d1aa98b7e

    • SSDEEP

      49152:8nQQqMSPbcBVQejIkQo6SArf0XdX63DE4JUJn0EF9a4AhAU+LGI7QOZ4HDX:czqPoBhUk36SAQx6Wf9AZHz

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Wannacry family

    • Contacts a large (3093) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks