Overview

overview

10

Static

static

3

2023-05-12...ry.exe

windows10-ltsc 2021-x64

10

Resubmissions

22-01-2025 12:04

250122-n8tcpswncm 10

22-01-2025 12:02

250122-n7fp8awmfl 10

13-05-2023 03:12

230513-dp9kgafd59 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2023-05-12_e35e427cd5131bd06793f67ab0465cb6_wannacry.exe

  • Size

    3.6MB

  • Sample

    250122-n8tcpswncm

  • MD5

    e35e427cd5131bd06793f67ab0465cb6

  • SHA1

    e47ffcea00cda8aa4d4343807a075ed6bec0c91e

  • SHA256

    fc849725187a811a219d5aecb22ee7d502a0007512386e76899a76be67ebac07

  • SHA512

    7831096c6c2a6663cba2b405e7bc9045d19447f7c63cb107205eb83da65ea6f561111884a310c15da954e0d9a6deb62c201a2b2e4738fc14ef22dcaca78ec422

  • SSDEEP

    98304:X8qPoBhzhaRxcSUDk36SAEdhvxWa9P593R8yAVp2:X8qPehCxcxk3ZAEUadzR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2023-05-12_e35e427cd5131bd06793f67ab0465cb6_wannacry.exe

    • Size

      3.6MB

    • MD5

      e35e427cd5131bd06793f67ab0465cb6

    • SHA1

      e47ffcea00cda8aa4d4343807a075ed6bec0c91e

    • SHA256

      fc849725187a811a219d5aecb22ee7d502a0007512386e76899a76be67ebac07

    • SHA512

      7831096c6c2a6663cba2b405e7bc9045d19447f7c63cb107205eb83da65ea6f561111884a310c15da954e0d9a6deb62c201a2b2e4738fc14ef22dcaca78ec422

    • SSDEEP

      98304:X8qPoBhzhaRxcSUDk36SAEdhvxWa9P593R8yAVp2:X8qPehCxcxk3ZAEUadzR8yc4

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (50090) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks