Overview

overview

10

Static

static

3

2025-01-31...ry.exe

windows7-x64

10

2025-01-31...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-31_eb1d411a67364066bc490b055ff6559a_wannacry

  • Size

    5.0MB

  • Sample

    250131-w2vaestlaw

  • MD5

    eb1d411a67364066bc490b055ff6559a

  • SHA1

    8108c5913ad5b79ff057c3dac6bfc0230d9834b3

  • SHA256

    26e8421ad06caef8fcca351a4f72422fac6912518efd18420081e64dbd52e867

  • SHA512

    4c76a37e0692e936479091503c5056f0cbe6149dc22f0e5cac8c5912a7481900151b047b586218b9f60325c282ddb6d491dbdf90630c056b88c5d8451c016441

  • SSDEEP

    98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P59D:Z8qPe1Cxcxk3ZAEUadn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-01-31_eb1d411a67364066bc490b055ff6559a_wannacry

    • Size

      5.0MB

    • MD5

      eb1d411a67364066bc490b055ff6559a

    • SHA1

      8108c5913ad5b79ff057c3dac6bfc0230d9834b3

    • SHA256

      26e8421ad06caef8fcca351a4f72422fac6912518efd18420081e64dbd52e867

    • SHA512

      4c76a37e0692e936479091503c5056f0cbe6149dc22f0e5cac8c5912a7481900151b047b586218b9f60325c282ddb6d491dbdf90630c056b88c5d8451c016441

    • SSDEEP

      98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P59D:Z8qPe1Cxcxk3ZAEUadn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3308) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks