Resubmissions

11-01-2025 14:55

250111-salbna1rcx 3

11-01-2025 14:31

250111-rvqlfatnej 10

General

  • Target

    2025-01-11_55e31f54b961e26bb3aa62de951774c0_wannacry

  • Size

    5.0MB

  • Sample

    250111-rvqlfatnej

  • MD5

    55e31f54b961e26bb3aa62de951774c0

  • SHA1

    d1f6f53829b5776ac78aa3f40ab4daab8b85aabd

  • SHA256

    0921e8f080e50b06314a3a811e49241747e8f9e2ab3a5a3454a9adaec45fb449

  • SHA512

    5dc1496e5ace6c51e4dd4852f4aaa331547f2fa8972c7ed5ab944996bb1b458b5f541301b034bb15f1b20394f5e0dde08f6152bfb092f5eddfab3fed90f741c6

  • SSDEEP

    12288:rebLgmluCti62WfSm0iEcQhfYNVUy7ckPU82900Ve7zw+K+DHY1n:ibLguriIfEcQdIVUacMNgef0QY

Malware Config

Targets

    • Target

      2025-01-11_55e31f54b961e26bb3aa62de951774c0_wannacry

    • Size

      5.0MB

    • MD5

      55e31f54b961e26bb3aa62de951774c0

    • SHA1

      d1f6f53829b5776ac78aa3f40ab4daab8b85aabd

    • SHA256

      0921e8f080e50b06314a3a811e49241747e8f9e2ab3a5a3454a9adaec45fb449

    • SHA512

      5dc1496e5ace6c51e4dd4852f4aaa331547f2fa8972c7ed5ab944996bb1b458b5f541301b034bb15f1b20394f5e0dde08f6152bfb092f5eddfab3fed90f741c6

    • SSDEEP

      12288:rebLgmluCti62WfSm0iEcQhfYNVUy7ckPU82900Ve7zw+K+DHY1n:ibLguriIfEcQdIVUacMNgef0QY

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Wannacry family

    • Contacts a large (3187) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks