Overview

overview

10

Static

static

3

2025-02-01...ry.exe

windows7-x64

10

2025-02-01...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-01_10decb3367cf642cd31dd17003711103_wannacry

  • Size

    5.0MB

  • Sample

    250201-m56m7a1mgn

  • MD5

    10decb3367cf642cd31dd17003711103

  • SHA1

    3ebe45792b850e17452ded405739ecf3dbb5c8cf

  • SHA256

    ccb720495b9b7c94c3dda8c99fb3848d4011e405c0f91bedc6eca5cb78f1c2f4

  • SHA512

    27d145f17b0d4ea107f12aaa6e525e9a573aa24c559d49373dc9445a542246a9d2ed5b975e8e1168864fad65ec92df1f842923ad0961739f8dc2cafa40182f1c

  • SSDEEP

    98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P590:Z8qPe1Cxcxk3ZAEUadQ

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-01_10decb3367cf642cd31dd17003711103_wannacry

    • Size

      5.0MB

    • MD5

      10decb3367cf642cd31dd17003711103

    • SHA1

      3ebe45792b850e17452ded405739ecf3dbb5c8cf

    • SHA256

      ccb720495b9b7c94c3dda8c99fb3848d4011e405c0f91bedc6eca5cb78f1c2f4

    • SHA512

      27d145f17b0d4ea107f12aaa6e525e9a573aa24c559d49373dc9445a542246a9d2ed5b975e8e1168864fad65ec92df1f842923ad0961739f8dc2cafa40182f1c

    • SSDEEP

      98304:Z8qPoBhz1aRxcSUDk36SAEdhvxWa9P590:Z8qPe1Cxcxk3ZAEUadQ

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3255) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks