Overview

overview

10

Static

static

3

2025-01-25...ry.exe

windows7-x64

10

2025-01-25...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-25_6e0d3e0068cc325ebe65a893cb6b26d3_wannacry

  • Size

    5.0MB

  • Sample

    250125-24kfwstkhv

  • MD5

    6e0d3e0068cc325ebe65a893cb6b26d3

  • SHA1

    27e29d503c76ece44d3b4de0d4b4b2e71bbf5ed6

  • SHA256

    230999d01598f82dcfe74252740c61f0decfedd1930db1edc71943a0e1ac0ed5

  • SHA512

    dbe6cccdbfb530e133f9322f1009ca250e612d3fec5d1aca5fefd543a13629088ecc385ecd4fcba3353963dbe0241bb43f44e5cf4d8d038c1a2c8db13bb9a174

  • SSDEEP

    98304:XDqThz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:XDqV1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-25_6e0d3e0068cc325ebe65a893cb6b26d3_wannacry

    • Size

      5.0MB

    • MD5

      6e0d3e0068cc325ebe65a893cb6b26d3

    • SHA1

      27e29d503c76ece44d3b4de0d4b4b2e71bbf5ed6

    • SHA256

      230999d01598f82dcfe74252740c61f0decfedd1930db1edc71943a0e1ac0ed5

    • SHA512

      dbe6cccdbfb530e133f9322f1009ca250e612d3fec5d1aca5fefd543a13629088ecc385ecd4fcba3353963dbe0241bb43f44e5cf4d8d038c1a2c8db13bb9a174

    • SSDEEP

      98304:XDqThz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:XDqV1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (2929) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks