Overview

overview

10

Static

static

3

2025-01-23...ry.exe

windows7-x64

10

2025-01-23...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-23_bf5c702f0fcc3319d9e340ee7a8b4b48_wannacry

  • Size

    3.6MB

  • Sample

    250123-yh7shssneq

  • MD5

    bf5c702f0fcc3319d9e340ee7a8b4b48

  • SHA1

    751e879251703a3f398c286b2cf86de07848a799

  • SHA256

    7a2a33b19b1d920b05b8b3f0de510b6d2dbd7a822dea68954731c3e659bda3dd

  • SHA512

    df7750f6b2afc4b56f8202f001151c747646159dd778f3671167731246ecf0c37d29c6dd19bc10a22b9cc674c0a59bb858c17e8e854b6e53acbf82510ac7b2b3

  • SSDEEP

    49152:2n/MSPbcBVQej/1INRx+TSqTdX1HkQo6SAAaE:y/PoBhz1aRxcSUDk36SA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-23_bf5c702f0fcc3319d9e340ee7a8b4b48_wannacry

    • Size

      3.6MB

    • MD5

      bf5c702f0fcc3319d9e340ee7a8b4b48

    • SHA1

      751e879251703a3f398c286b2cf86de07848a799

    • SHA256

      7a2a33b19b1d920b05b8b3f0de510b6d2dbd7a822dea68954731c3e659bda3dd

    • SHA512

      df7750f6b2afc4b56f8202f001151c747646159dd778f3671167731246ecf0c37d29c6dd19bc10a22b9cc674c0a59bb858c17e8e854b6e53acbf82510ac7b2b3

    • SSDEEP

      49152:2n/MSPbcBVQej/1INRx+TSqTdX1HkQo6SAAaE:y/PoBhz1aRxcSUDk36SA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3242) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks