Overview

overview

10

Static

static

3

2025-01-30...ry.exe

windows7-x64

10

2025-01-30...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-30_bcad73cb6776fa8ea72152020dd1974d_wannacry

  • Size

    5.0MB

  • Sample

    250130-2vt9qsxkbm

  • MD5

    bcad73cb6776fa8ea72152020dd1974d

  • SHA1

    797abb122dc504bdbe164ad7dcabda86b290faa0

  • SHA256

    373ec52e5d8a0276b68c43970057f413ccd26fe65cea5772b28afad524337f5b

  • SHA512

    080119cb63ec311f36f53c0e6ad84cfe805e1c8b4986b9264df1aeb7dadc5594175bf35cb285ac59fa2c1c5df3db7416a7d19362e754c11be8b9d7e144a9bf03

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA4hnvxJM0H9PAMEcaEaur:yDqPoBhz1aRxcSUDk36SABhvxWa9P59r

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-30_bcad73cb6776fa8ea72152020dd1974d_wannacry

    • Size

      5.0MB

    • MD5

      bcad73cb6776fa8ea72152020dd1974d

    • SHA1

      797abb122dc504bdbe164ad7dcabda86b290faa0

    • SHA256

      373ec52e5d8a0276b68c43970057f413ccd26fe65cea5772b28afad524337f5b

    • SHA512

      080119cb63ec311f36f53c0e6ad84cfe805e1c8b4986b9264df1aeb7dadc5594175bf35cb285ac59fa2c1c5df3db7416a7d19362e754c11be8b9d7e144a9bf03

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA4hnvxJM0H9PAMEcaEaur:yDqPoBhz1aRxcSUDk36SABhvxWa9P59r

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3131) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks