Resubmissions

28-01-2025 12:33

250128-prkjxa1qem 10

27-01-2025 06:38

250127-hecj7swkdz 10

General

  • Target

    2025-01-27_7b9122e0ca91c9be6abbb94cd05b0237_wannacry

  • Size

    3.6MB

  • Sample

    250128-prkjxa1qem

  • MD5

    7b9122e0ca91c9be6abbb94cd05b0237

  • SHA1

    c59dc99f621c5ffd91d3803d1e409d3dda533242

  • SHA256

    cd16d548bc88bf98ed238358f6e80197b7fd01d67ffd1421a7d4227d5cb5b53b

  • SHA512

    03b28bfff2ad0ccf6ad42a49d6b5aff89ed42404df471fa9b5f1870e263e5139a22cd3392b93efcf69e151c269c26f3271103f7e2d43432d6576923ce363bd6b

  • SSDEEP

    49152:VnjQqMSPbcBVQej/VINRx+TSqTdd1HkQo6SAARdhnvxJM0H9PAMEcaEaRHADJ:Z8qPoBhzVaRxcSUZk36SAEdhvxWa9P5D

Malware Config

Targets

    • Target

      2025-01-27_7b9122e0ca91c9be6abbb94cd05b0237_wannacry

    • Size

      3.6MB

    • MD5

      7b9122e0ca91c9be6abbb94cd05b0237

    • SHA1

      c59dc99f621c5ffd91d3803d1e409d3dda533242

    • SHA256

      cd16d548bc88bf98ed238358f6e80197b7fd01d67ffd1421a7d4227d5cb5b53b

    • SHA512

      03b28bfff2ad0ccf6ad42a49d6b5aff89ed42404df471fa9b5f1870e263e5139a22cd3392b93efcf69e151c269c26f3271103f7e2d43432d6576923ce363bd6b

    • SSDEEP

      49152:VnjQqMSPbcBVQej/VINRx+TSqTdd1HkQo6SAARdhnvxJM0H9PAMEcaEaRHADJ:Z8qPoBhzVaRxcSUZk36SAEdhvxWa9P5D

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Wannacry family

    • Contacts a large (3382) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks