Overview

overview

10

Static

static

3

2025-01-20...ry.exe

windows7-x64

10

2025-01-20...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-20_178018208d64cffd440180008d212f1a_wannacry

  • Size

    3.6MB

  • Sample

    250120-c8w8taxmgx

  • MD5

    178018208d64cffd440180008d212f1a

  • SHA1

    f9ed18b62c28cd012f91a9137d284eff44518641

  • SHA256

    01200b11bbeb18e5f322cf705296256a07985ed69bf9b78f4e73bd3e7659fb51

  • SHA512

    3fd34c807a3af58e6fc31afc9214e6be58064c9c62651f321b7088bddf48d879fe02cb9dc5db66e362bd0cdce47f0e571ed086b0ca017b3595947e151bd005ed

  • SSDEEP

    98304:Z8pNcZ/+OawKZO/Q0qHPRJAKvSteNbsBLkVGXS:Z8ncZzajOI0mvA9dK

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-20_178018208d64cffd440180008d212f1a_wannacry

    • Size

      3.6MB

    • MD5

      178018208d64cffd440180008d212f1a

    • SHA1

      f9ed18b62c28cd012f91a9137d284eff44518641

    • SHA256

      01200b11bbeb18e5f322cf705296256a07985ed69bf9b78f4e73bd3e7659fb51

    • SHA512

      3fd34c807a3af58e6fc31afc9214e6be58064c9c62651f321b7088bddf48d879fe02cb9dc5db66e362bd0cdce47f0e571ed086b0ca017b3595947e151bd005ed

    • SSDEEP

      98304:Z8pNcZ/+OawKZO/Q0qHPRJAKvSteNbsBLkVGXS:Z8ncZzajOI0mvA9dK

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3181) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks