Overview

overview

10

Static

static

3

2025-01-29...ry.exe

windows7-x64

10

2025-01-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-29_f38f76ab090bcc255d1cc7bf8c0bb749_wannacry

  • Size

    5.0MB

  • Sample

    250129-zq1vlsyjak

  • MD5

    f38f76ab090bcc255d1cc7bf8c0bb749

  • SHA1

    0a20f6258696135573c9c214a2035da4d6c1ae6b

  • SHA256

    663ea7e71aafa74b4aafe627ab06a20fa5e1d8db3d75d7273c2e2a6528f89e2f

  • SHA512

    c075fdfd4b1bf0e2cc37eea862e9b0c640e09523ed7ac6dfafb82ce43db4657f3a5cd3fc6c43dbddf2d02b48f4c39b2983fdb727330091ffe169e20cccf84e00

  • SSDEEP

    49152:VnAQqMSPbcBVQej/1IPo6SAARdhEH9saEau3R8yAH1plAH:ZDqPoBhz1J6SAEdhq9I3R8yAVp2H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-29_f38f76ab090bcc255d1cc7bf8c0bb749_wannacry

    • Size

      5.0MB

    • MD5

      f38f76ab090bcc255d1cc7bf8c0bb749

    • SHA1

      0a20f6258696135573c9c214a2035da4d6c1ae6b

    • SHA256

      663ea7e71aafa74b4aafe627ab06a20fa5e1d8db3d75d7273c2e2a6528f89e2f

    • SHA512

      c075fdfd4b1bf0e2cc37eea862e9b0c640e09523ed7ac6dfafb82ce43db4657f3a5cd3fc6c43dbddf2d02b48f4c39b2983fdb727330091ffe169e20cccf84e00

    • SSDEEP

      49152:VnAQqMSPbcBVQej/1IPo6SAARdhEH9saEau3R8yAH1plAH:ZDqPoBhz1J6SAEdhq9I3R8yAVp2H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3349) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks