Overview

overview

10

Static

static

3

2025-01-12...ry.exe

windows7-x64

10

2025-01-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-12_c1983a1cd5f398c3b41da4767625a9ed_wannacry

  • Size

    5.0MB

  • Sample

    250112-tcfpmaymbv

  • MD5

    c1983a1cd5f398c3b41da4767625a9ed

  • SHA1

    b74e4d0bf229969f14e9690699e62600b15dfaf6

  • SHA256

    a38425e8fdf8c77aed1ca254f6d3726ca2801133190f6f09b06c5c4667192378

  • SHA512

    3b1d9f5a01abd5935686566ff2771a0474c9b5e611cb5eecc8c314a0b045c73b6dde12871513f2981b02ebac88857f5adac4a5543fc6e49ec22956ba359c5f96

  • SSDEEP

    98304:08qPoBhz1aRxcSUDk36SAEdhvxWa9P5uB/nZ/9SL2:08qPe1Cxcxk3ZAEUadwbi2

Score
10/10
wannacrydiscoveryransomwarespywarestealerworm

Malware Config

Targets

    • Target

      2025-01-12_c1983a1cd5f398c3b41da4767625a9ed_wannacry

    • Size

      5.0MB

    • MD5

      c1983a1cd5f398c3b41da4767625a9ed

    • SHA1

      b74e4d0bf229969f14e9690699e62600b15dfaf6

    • SHA256

      a38425e8fdf8c77aed1ca254f6d3726ca2801133190f6f09b06c5c4667192378

    • SHA512

      3b1d9f5a01abd5935686566ff2771a0474c9b5e611cb5eecc8c314a0b045c73b6dde12871513f2981b02ebac88857f5adac4a5543fc6e49ec22956ba359c5f96

    • SSDEEP

      98304:08qPoBhz1aRxcSUDk36SAEdhvxWa9P5uB/nZ/9SL2:08qPe1Cxcxk3ZAEUadwbi2

    Score
    10/10
    wannacrydiscoveryransomwarespywarestealerworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3296) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks