Overview

overview

10

Static

static

3

2025-01-17...ry.exe

windows7-x64

10

2025-01-17...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-17_a7490ce6e293eca2fa8bafa7d4cace9b_wannacry

  • Size

    5.0MB

  • Sample

    250117-qbdl4azjep

  • MD5

    a7490ce6e293eca2fa8bafa7d4cace9b

  • SHA1

    650416b95e1a2ab4984f13668ab461bef7e08d21

  • SHA256

    cd9fb4ea61ec028205dfd9d2554a32486f23380f10023569aa436b1aacbbc373

  • SHA512

    103daf9cb11d5294846e2d5d3bd3d74eba6d35ce89df259af7dcc3d96ee6fb60d31ae48aca0697d19972cc1ab7be5ae063ddf43f9f9dd2c884d52bb0d26fff21

  • SSDEEP

    12288:GvbLgPluCtgQhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHeQYSUjEy:2bLgdrgQhfdmMSirYbcMNgef0QeQjG/

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-17_a7490ce6e293eca2fa8bafa7d4cace9b_wannacry

    • Size

      5.0MB

    • MD5

      a7490ce6e293eca2fa8bafa7d4cace9b

    • SHA1

      650416b95e1a2ab4984f13668ab461bef7e08d21

    • SHA256

      cd9fb4ea61ec028205dfd9d2554a32486f23380f10023569aa436b1aacbbc373

    • SHA512

      103daf9cb11d5294846e2d5d3bd3d74eba6d35ce89df259af7dcc3d96ee6fb60d31ae48aca0697d19972cc1ab7be5ae063ddf43f9f9dd2c884d52bb0d26fff21

    • SSDEEP

      12288:GvbLgPluCtgQhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHeQYSUjEy:2bLgdrgQhfdmMSirYbcMNgef0QeQjG/

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3262) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks