wannacry | cdc53ffe8d2696efa66b6fa3e18a92e2b67078fcd1572e0b752b353f558148d3 | Triage

Resubmissions

24-01-2025 13:04

250124-qbd8mazkdv 10

22-01-2025 02:48

250122-danpfstrdz 10

Sharing

General

Target

cdc53ffe8d2696efa66b6fa3e18a92e2b67078fcd1572e0b752b353f558148d3N.exe
Size

3.6MB
Sample

250124-qbd8mazkdv
MD5

b41d52edd1a2ff0d9020990c442a46d0
SHA1

4a443bd3cbe60087d76ee58f95dfe11119a06074
SHA256

cdc53ffe8d2696efa66b6fa3e18a92e2b67078fcd1572e0b752b353f558148d3
SHA512

24774545dbcc33e0125b4ac421cd2338060f6f47fcb042e4bbc445646b13da9fcc10aa3456e12fe35812588446d8d044ba5ece708faa5e1d861d7ac775f9f29a
SSDEEP

98304:p8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2Hs:p8qPe1Cxcxk3ZAEUadzR8yc4Hs

Score

10^/10

wannacry discovery ransomware worm

Malware Config

Targets

- Target
  
  cdc53ffe8d2696efa66b6fa3e18a92e2b67078fcd1572e0b752b353f558148d3N.exe
- Size
  
  3.6MB
- MD5
  
  b41d52edd1a2ff0d9020990c442a46d0
- SHA1
  
  4a443bd3cbe60087d76ee58f95dfe11119a06074
- SHA256
  
  cdc53ffe8d2696efa66b6fa3e18a92e2b67078fcd1572e0b752b353f558148d3
- SHA512
  
  24774545dbcc33e0125b4ac421cd2338060f6f47fcb042e4bbc445646b13da9fcc10aa3456e12fe35812588446d8d044ba5ece708faa5e1d861d7ac775f9f29a
- SSDEEP
  
  98304:p8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2Hs:p8qPe1Cxcxk3ZAEUadzR8yc4Hs
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Wannacry family
  wannacry
- Contacts a large (3272) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm