Overview

overview

10

Static

static

3

2025-01-23...ry.exe

windows7-x64

10

2025-01-23...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-23_5bfdb53166290f0e8c2eb29a4c27104e_wannacry

  • Size

    5.0MB

  • Sample

    250123-2t11wsxkgs

  • MD5

    5bfdb53166290f0e8c2eb29a4c27104e

  • SHA1

    0a601bdad79b2bc40a4716a1c5d2608433cc9b0e

  • SHA256

    3b4fa57c1630d4ae5f9589e819e4a459ea373da55125ebcaa081e813e56edaf2

  • SHA512

    426b791e18d26e4f155e2cdc0274b2b37401304b85bfda47b52641d3381f2137fb08366db353b56bdc0907cbc0bf42f62dce32fa1a3e9c1e591f23327a72130c

  • SSDEEP

    98304:XDqPoBhz1aRxcSUDk36SA3dhvxWa9P593R8yAVp2H:XDqPe1Cxcxk3ZA3UadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-23_5bfdb53166290f0e8c2eb29a4c27104e_wannacry

    • Size

      5.0MB

    • MD5

      5bfdb53166290f0e8c2eb29a4c27104e

    • SHA1

      0a601bdad79b2bc40a4716a1c5d2608433cc9b0e

    • SHA256

      3b4fa57c1630d4ae5f9589e819e4a459ea373da55125ebcaa081e813e56edaf2

    • SHA512

      426b791e18d26e4f155e2cdc0274b2b37401304b85bfda47b52641d3381f2137fb08366db353b56bdc0907cbc0bf42f62dce32fa1a3e9c1e591f23327a72130c

    • SSDEEP

      98304:XDqPoBhz1aRxcSUDk36SA3dhvxWa9P593R8yAVp2H:XDqPe1Cxcxk3ZA3UadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3324) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks