wannacry

Resubmissions

11-01-2025 14:10

250111-rgstmstlbk 10

11-01-2025 11:44

250111-nv79ps1mal 10

Sharing

Copy URL

Twitter E-mail

General

Target

2025-01-11_a2e7604fa2cc092fe143be835606c572_wannacry
Size

3.6MB
Sample

250111-rgstmstlbk
MD5

a2e7604fa2cc092fe143be835606c572
SHA1

664131bcef961caec1e3ee959644ffdd362ee45e
SHA256

b09ff8ebbf1205d9efae84e56f5b76d2907f6ecd23c86e53da4a5850437414f8
SHA512

5cb428923a1f6e4319fcd91e6c20f7ca6ffcb5379ceaea76fd2f524a6925c1bf927c823e4200e5cc3d901c2c53335ef47be08ae05f524e028d0b462028d24bc2
SSDEEP

49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQp:yDqPoBhz1aRxcSUDku

Score

10^/10

Malware Config

Targets

- Target
  
  2025-01-11_a2e7604fa2cc092fe143be835606c572_wannacry
- Size
  
  3.6MB
- MD5
  
  a2e7604fa2cc092fe143be835606c572
- SHA1
  
  664131bcef961caec1e3ee959644ffdd362ee45e
- SHA256
  
  b09ff8ebbf1205d9efae84e56f5b76d2907f6ecd23c86e53da4a5850437414f8
- SHA512
  
  5cb428923a1f6e4319fcd91e6c20f7ca6ffcb5379ceaea76fd2f524a6925c1bf927c823e4200e5cc3d901c2c53335ef47be08ae05f524e028d0b462028d24bc2
- SSDEEP
  
  49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQp:yDqPoBhz1aRxcSUDku
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Wannacry family
  wannacry
- Contacts a large (3174) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Wannacry family

Contacts a large (3174) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2