Overview

overview

10

Static

static

3

2025-01-17...ry.exe

windows7-x64

10

2025-01-17...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-17_bbfa63f5da238170ae8d43e3a522d459_wannacry

  • Size

    5.0MB

  • Sample

    250117-rlxcma1mdt

  • MD5

    bbfa63f5da238170ae8d43e3a522d459

  • SHA1

    c8764218719b699ab40043bf46a9c32169d432c8

  • SHA256

    8adf3e6724d5c4d1fab78bc390b7479243318c9f571a26c9a2d05b1d90cf0dbb

  • SHA512

    f383cd16ecfd273f461838df744b6a3f8a1ef1e5dffa508156053e596ce62cc9bceb954989b8d2b65c54559a4c92c2eff90e4be72cd170c95cf9db333d8e02c0

  • SSDEEP

    98304:yDpz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:yDB1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-17_bbfa63f5da238170ae8d43e3a522d459_wannacry

    • Size

      5.0MB

    • MD5

      bbfa63f5da238170ae8d43e3a522d459

    • SHA1

      c8764218719b699ab40043bf46a9c32169d432c8

    • SHA256

      8adf3e6724d5c4d1fab78bc390b7479243318c9f571a26c9a2d05b1d90cf0dbb

    • SHA512

      f383cd16ecfd273f461838df744b6a3f8a1ef1e5dffa508156053e596ce62cc9bceb954989b8d2b65c54559a4c92c2eff90e4be72cd170c95cf9db333d8e02c0

    • SSDEEP

      98304:yDpz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:yDB1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3245) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks