Overview

overview

10

Static

static

3

2025-01-29...ry.exe

windows7-x64

10

2025-01-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-29_62d38138d9c1e32394f206840c57123e_wannacry

  • Size

    2.2MB

  • Sample

    250129-a56xqswkey

  • MD5

    62d38138d9c1e32394f206840c57123e

  • SHA1

    ae655d701c02be7d9a04f7f6297ea05f04b73785

  • SHA256

    b550226d6fce736f1f0f0593e40d0453067b734582a57b6ed214c8116e272f1e

  • SHA512

    440d88a9efe4d3a1edbfea21ab88a5d3435c6fd7b1d2200d4fb62d0abd37b8079ed30dcb5e0c7fcd6e6ba70ae54dc6f99c636438d5aad60c359448f0072c48cf

  • SSDEEP

    49152:QnpaSPbcBVQ7/1UNRx+TSqTdX1HkQo6SAARdhnvn:QpJoB81mRxcSUDk36SAEdhvn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-29_62d38138d9c1e32394f206840c57123e_wannacry

    • Size

      2.2MB

    • MD5

      62d38138d9c1e32394f206840c57123e

    • SHA1

      ae655d701c02be7d9a04f7f6297ea05f04b73785

    • SHA256

      b550226d6fce736f1f0f0593e40d0453067b734582a57b6ed214c8116e272f1e

    • SHA512

      440d88a9efe4d3a1edbfea21ab88a5d3435c6fd7b1d2200d4fb62d0abd37b8079ed30dcb5e0c7fcd6e6ba70ae54dc6f99c636438d5aad60c359448f0072c48cf

    • SSDEEP

      49152:QnpaSPbcBVQ7/1UNRx+TSqTdX1HkQo6SAARdhnvn:QpJoB81mRxcSUDk36SAEdhvn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3312) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks