Overview

overview

10

Static

static

3

2025-01-12...ry.exe

windows7-x64

10

2025-01-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-12_2555e31b17d50b36d58d8f241f299147_wannacry

  • Size

    3.6MB

  • Sample

    250112-dzmtfstqh1

  • MD5

    2555e31b17d50b36d58d8f241f299147

  • SHA1

    8601240791beb481a5d751907b719dd147edaf27

  • SHA256

    050460bea8e9af2c9c6e97ffdb1cb980b60f5a68613dda718dd74496d86f386c

  • SHA512

    abf3e9863c624831e368058666db65e2686aa5ffe646158964f89c47ad328153640cc5c7909fdd64388451b3c30f44ed964b6fd4007fb1ccf77b97b1e519545e

  • SSDEEP

    98304:AvPoBhz1aRxcSUDk36SAEdhvEnmur2uuh0/kzf:AvPe1Cxcxk3ZAEQm/uuh0Of

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-12_2555e31b17d50b36d58d8f241f299147_wannacry

    • Size

      3.6MB

    • MD5

      2555e31b17d50b36d58d8f241f299147

    • SHA1

      8601240791beb481a5d751907b719dd147edaf27

    • SHA256

      050460bea8e9af2c9c6e97ffdb1cb980b60f5a68613dda718dd74496d86f386c

    • SHA512

      abf3e9863c624831e368058666db65e2686aa5ffe646158964f89c47ad328153640cc5c7909fdd64388451b3c30f44ed964b6fd4007fb1ccf77b97b1e519545e

    • SSDEEP

      98304:AvPoBhz1aRxcSUDk36SAEdhvEnmur2uuh0/kzf:AvPe1Cxcxk3ZAEQm/uuh0Of

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (2997) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks