Overview

overview

10

Static

static

3

2025-01-22...ry.exe

windows7-x64

10

2025-01-22...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-22_6ac0a74ba78d129e9e0f4d4fb85d58de_wannacry

  • Size

    5.0MB

  • Sample

    250122-w7pxwszpcq

  • MD5

    6ac0a74ba78d129e9e0f4d4fb85d58de

  • SHA1

    8a5cb7010435bd0e82e9b352d75bb3c5d702db2f

  • SHA256

    5c29d2d69701b0e40ade4f22dc91b7e5838c0e0d7650c083c676466fcaf193db

  • SHA512

    cf4b5909a822a9ab31aea36b935bb13c0884c46059338439806fb940128baf7081dc142e540fe0521ab64c792ebd4fffca1edfe3a114fd05811f1c4062f41f4f

  • SSDEEP

    12288:GwbLgPluxQhMbaIMu7L5NVErCA4z2g6rTcbckPU82900:VbLgdeQhfdmMSirYbcMN

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-22_6ac0a74ba78d129e9e0f4d4fb85d58de_wannacry

    • Size

      5.0MB

    • MD5

      6ac0a74ba78d129e9e0f4d4fb85d58de

    • SHA1

      8a5cb7010435bd0e82e9b352d75bb3c5d702db2f

    • SHA256

      5c29d2d69701b0e40ade4f22dc91b7e5838c0e0d7650c083c676466fcaf193db

    • SHA512

      cf4b5909a822a9ab31aea36b935bb13c0884c46059338439806fb940128baf7081dc142e540fe0521ab64c792ebd4fffca1edfe3a114fd05811f1c4062f41f4f

    • SSDEEP

      12288:GwbLgPluxQhMbaIMu7L5NVErCA4z2g6rTcbckPU82900:VbLgdeQhfdmMSirYbcMN

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3236) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks