Overview

overview

10

Static

static

3

2025-02-04...ry.exe

windows7-x64

10

2025-02-04...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-04_f9944b431ce2fb4a7df756d05e84bd7d_wannacry

  • Size

    5.0MB

  • Sample

    250204-nzbfjavpbt

  • MD5

    f9944b431ce2fb4a7df756d05e84bd7d

  • SHA1

    71f23ac5efcb9d5452ab5b52f6f9995714877bdf

  • SHA256

    e1c13dd22dbf283dee4953f9164c1ad0f4de3565b9960a1acb848c7b11fbe83a

  • SHA512

    0ad5d535d2909f53b8b4d6ea16d076e1c0a3b7ff93daab3c40f68508c4f9f2614a06b17564315691d768079ede5d301efcc48bbe9a07faddfbc5ec9d628090b8

  • SSDEEP

    98304:yDqPoBhz1aRxcSUDk36SAEdhrxWa9D+GF:yDqPe1Cxcxk3ZAEwatF

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-04_f9944b431ce2fb4a7df756d05e84bd7d_wannacry

    • Size

      5.0MB

    • MD5

      f9944b431ce2fb4a7df756d05e84bd7d

    • SHA1

      71f23ac5efcb9d5452ab5b52f6f9995714877bdf

    • SHA256

      e1c13dd22dbf283dee4953f9164c1ad0f4de3565b9960a1acb848c7b11fbe83a

    • SHA512

      0ad5d535d2909f53b8b4d6ea16d076e1c0a3b7ff93daab3c40f68508c4f9f2614a06b17564315691d768079ede5d301efcc48bbe9a07faddfbc5ec9d628090b8

    • SSDEEP

      98304:yDqPoBhz1aRxcSUDk36SAEdhrxWa9D+GF:yDqPe1Cxcxk3ZAEwatF

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3285) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks