Overview

overview

10

Static

static

3

2025-01-17...ry.exe

windows7-x64

10

2025-01-17...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-17_8219cada1ace7ec6535a3c45de6f94fa_wannacry

  • Size

    5.0MB

  • Sample

    250117-pq79ksxmds

  • MD5

    8219cada1ace7ec6535a3c45de6f94fa

  • SHA1

    b44b2714db03703f879239826fbf01750c69c2dc

  • SHA256

    f26b45006333f8f8c1b2efae5382077635a46e9eac4223ee6469bd908898928c

  • SHA512

    76fbc9c0f1873bb1b3f5c48917b83c666622eec9ab69e86246088dc2b018edada3092f74693d0a406542c46782bef3b98de1ee450f5e49f0dc0d2c5db1009e21

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhvxWas593R8yAVp2H:yDqPe1Cxcxk3ZAEUaszR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-17_8219cada1ace7ec6535a3c45de6f94fa_wannacry

    • Size

      5.0MB

    • MD5

      8219cada1ace7ec6535a3c45de6f94fa

    • SHA1

      b44b2714db03703f879239826fbf01750c69c2dc

    • SHA256

      f26b45006333f8f8c1b2efae5382077635a46e9eac4223ee6469bd908898928c

    • SHA512

      76fbc9c0f1873bb1b3f5c48917b83c666622eec9ab69e86246088dc2b018edada3092f74693d0a406542c46782bef3b98de1ee450f5e49f0dc0d2c5db1009e21

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhvxWas593R8yAVp2H:yDqPe1Cxcxk3ZAEUaszR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3286) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks