Overview

overview

10

Static

static

3

2025-01-17...ry.exe

windows7-x64

10

2025-01-17...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-17_2ceb24afa6d55763092d09c55b7b9118_wannacry

  • Size

    5.0MB

  • Sample

    250117-p4frgsxret

  • MD5

    2ceb24afa6d55763092d09c55b7b9118

  • SHA1

    ca7cebd8d729d2944545042365983c0ee16fc45d

  • SHA256

    88c726f5f1aaa2aa0b3e3414006d874b794ce1f19680b1d2e08f8289ee5a6835

  • SHA512

    73f0d14f8a255b8f08a043177d362df4e9ee3df977a823a9c034d8ed592db3be470d92790e8ec6f4fcc0144ca76838f810e8ecc88082eefd80635da748bc8174

  • SSDEEP

    12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+:2bLgddQhfdmMSirYbcMNgef0

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-17_2ceb24afa6d55763092d09c55b7b9118_wannacry

    • Size

      5.0MB

    • MD5

      2ceb24afa6d55763092d09c55b7b9118

    • SHA1

      ca7cebd8d729d2944545042365983c0ee16fc45d

    • SHA256

      88c726f5f1aaa2aa0b3e3414006d874b794ce1f19680b1d2e08f8289ee5a6835

    • SHA512

      73f0d14f8a255b8f08a043177d362df4e9ee3df977a823a9c034d8ed592db3be470d92790e8ec6f4fcc0144ca76838f810e8ecc88082eefd80635da748bc8174

    • SSDEEP

      12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+:2bLgddQhfdmMSirYbcMNgef0

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3191) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks