wannacry | 423f7ebbdef957c89c5cf1cb7a994980a60e678428d38cd3c89191c7bfe67876 | Triage

Sharing

General

Target

2025-02-04_2fd65baca3530d1342fbcebb4f1b3547_wannacry
Size

5.0MB
Sample

250204-bhh3tszkhy
MD5

2fd65baca3530d1342fbcebb4f1b3547
SHA1

611e7e2b258058868daa102188794e0b6749c698
SHA256

423f7ebbdef957c89c5cf1cb7a994980a60e678428d38cd3c89191c7bfe67876
SHA512

eb6143199cf9cbf3de6c1dd4532291ebd411605aa19f0c69d0f0a0399b2cbe92dcab20ec55d2ab3ec339789540300cf6e9122ecc48e08c8410ff52bf544008d3
SSDEEP

98304:BDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8a:BDqPe1Cxcxk3ZAEUadzR8a

Score

10^/10

wannacry defense_evasion discovery ransomware worm

Malware Config

Targets

- Target
  
  2025-02-04_2fd65baca3530d1342fbcebb4f1b3547_wannacry
- Size
  
  5.0MB
- MD5
  
  2fd65baca3530d1342fbcebb4f1b3547
- SHA1
  
  611e7e2b258058868daa102188794e0b6749c698
- SHA256
  
  423f7ebbdef957c89c5cf1cb7a994980a60e678428d38cd3c89191c7bfe67876
- SHA512
  
  eb6143199cf9cbf3de6c1dd4532291ebd411605aa19f0c69d0f0a0399b2cbe92dcab20ec55d2ab3ec339789540300cf6e9122ecc48e08c8410ff52bf544008d3
- SSDEEP
  
  98304:BDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8a:BDqPe1Cxcxk3ZAEUadzR8a
Score

10^/10

wannacry discovery ransomware worm defense_evasion
- Modifies firewall policy service
  defense_evasion
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Wannacry family
  wannacry
- Contacts a large (3155) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydefense_evasiondiscoveryransomwareworm