Overview

overview

10

Static

static

3

2025-01-12...ry.exe

windows7-x64

10

2025-01-12...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-12_c92a6516df5910d36779a0d59bfba257_wannacry

  • Size

    5.0MB

  • Sample

    250112-tcyv7symcw

  • MD5

    c92a6516df5910d36779a0d59bfba257

  • SHA1

    937ec687925b2d8f6207975f4ae5480218d1dfbe

  • SHA256

    9e37be9126491d2a29243b11cab3823999fc654f67b7e35011c87d494b1ade65

  • SHA512

    5da6f5dc1fae832541b874da1adedad3a495009bbbea1cce9f6d90c9d391060c522b0123cf11ddfaa928da2e720f10fce817070f8c193f47e83274180d7320aa

  • SSDEEP

    49152:vnZMSPbcBVQej/lNRx+XHkQo6SAARdhnv:/ZPoBhz3RxAk36SAEdhv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-12_c92a6516df5910d36779a0d59bfba257_wannacry

    • Size

      5.0MB

    • MD5

      c92a6516df5910d36779a0d59bfba257

    • SHA1

      937ec687925b2d8f6207975f4ae5480218d1dfbe

    • SHA256

      9e37be9126491d2a29243b11cab3823999fc654f67b7e35011c87d494b1ade65

    • SHA512

      5da6f5dc1fae832541b874da1adedad3a495009bbbea1cce9f6d90c9d391060c522b0123cf11ddfaa928da2e720f10fce817070f8c193f47e83274180d7320aa

    • SSDEEP

      49152:vnZMSPbcBVQej/lNRx+XHkQo6SAARdhnv:/ZPoBhz3RxAk36SAEdhv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3261) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks