Overview

overview

10

Static

static

3

2025-01-19...ry.exe

windows7-x64

10

2025-01-19...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-19_5225e9aa26a3613f5716167c4ecadbaa_wannacry

  • Size

    2.2MB

  • Sample

    250119-cxk2eatjem

  • MD5

    5225e9aa26a3613f5716167c4ecadbaa

  • SHA1

    9ea2af934dcf0eea14adc19077a6c06eb41ce1f2

  • SHA256

    e8ce67619fa1b32a8432141eb5a3bd76800ef594044ecbc0d7cea53282245ff9

  • SHA512

    ceb0a4fcf25153b3e43d4208336638ef05c64b4e5c19c1c0f075e6f84d22eb09edf9f91a800657f69d1bd8884a81338295494f7e0929ff3c77f44821bd360697

  • SSDEEP

    49152:vnZMSPbcBVQej/lNRx+XHkQo6SAARdhnvn:/ZPoBhz3RxAk36SAEdhvn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-19_5225e9aa26a3613f5716167c4ecadbaa_wannacry

    • Size

      2.2MB

    • MD5

      5225e9aa26a3613f5716167c4ecadbaa

    • SHA1

      9ea2af934dcf0eea14adc19077a6c06eb41ce1f2

    • SHA256

      e8ce67619fa1b32a8432141eb5a3bd76800ef594044ecbc0d7cea53282245ff9

    • SHA512

      ceb0a4fcf25153b3e43d4208336638ef05c64b4e5c19c1c0f075e6f84d22eb09edf9f91a800657f69d1bd8884a81338295494f7e0929ff3c77f44821bd360697

    • SSDEEP

      49152:vnZMSPbcBVQej/lNRx+XHkQo6SAARdhnvn:/ZPoBhz3RxAk36SAEdhvn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3202) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks