Overview

overview

10

Static

static

3

2025-02-01...ry.exe

windows7-x64

10

2025-02-01...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-01_823d2e7eb5f62a114834b8607a35e742_wannacry

  • Size

    5.0MB

  • Sample

    250201-qacneavphm

  • MD5

    823d2e7eb5f62a114834b8607a35e742

  • SHA1

    4999b245bb956e22dff4c8002b8c097aea67c823

  • SHA256

    f5802b1dd75c2ed4263de761db7a069999872ff1d059360604f9783793ba92e1

  • SHA512

    fc755306bfb6f81d5385eebf6cd5948e9200c0336a1967c05a81f310f2ebe19d7a23254554a3956cf2ef7dcc56c30fa073b160c172a4156cfa9f619f9ef5d526

  • SSDEEP

    49152:2nAQqMSPbcBVLPAMEcaEau3R8yAH1plAHv:yDqPoB5P593R8yAVp2Hv

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-01_823d2e7eb5f62a114834b8607a35e742_wannacry

    • Size

      5.0MB

    • MD5

      823d2e7eb5f62a114834b8607a35e742

    • SHA1

      4999b245bb956e22dff4c8002b8c097aea67c823

    • SHA256

      f5802b1dd75c2ed4263de761db7a069999872ff1d059360604f9783793ba92e1

    • SHA512

      fc755306bfb6f81d5385eebf6cd5948e9200c0336a1967c05a81f310f2ebe19d7a23254554a3956cf2ef7dcc56c30fa073b160c172a4156cfa9f619f9ef5d526

    • SSDEEP

      49152:2nAQqMSPbcBVLPAMEcaEau3R8yAH1plAHv:yDqPoB5P593R8yAVp2Hv

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3212) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks