Overview

overview

10

Static

static

3

2025-02-04...ry.exe

windows7-x64

10

2025-02-04...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-04_209a31fe0bc80e885ed773edc89e027f_wannacry

  • Size

    5.0MB

  • Sample

    250204-rc4qcazlfk

  • MD5

    209a31fe0bc80e885ed773edc89e027f

  • SHA1

    f8f3a0aacd076ce556412edffe1ace89b7566374

  • SHA256

    ef6d2087978542ab0ffcaaea6586a9965a008e44ae0186f1e4847ca0d5617baa

  • SHA512

    a8e1157404aba64d13b2c63f94a85d0c38be7739410dae374e8e516785e1d6592c0ae90fb88e48365a6edce84df3d295d54a3f3b22fcd9890f96082f17b09e7b

  • SSDEEP

    98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P5O:XDqPe1Cxcxk3ZAEUadI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-04_209a31fe0bc80e885ed773edc89e027f_wannacry

    • Size

      5.0MB

    • MD5

      209a31fe0bc80e885ed773edc89e027f

    • SHA1

      f8f3a0aacd076ce556412edffe1ace89b7566374

    • SHA256

      ef6d2087978542ab0ffcaaea6586a9965a008e44ae0186f1e4847ca0d5617baa

    • SHA512

      a8e1157404aba64d13b2c63f94a85d0c38be7739410dae374e8e516785e1d6592c0ae90fb88e48365a6edce84df3d295d54a3f3b22fcd9890f96082f17b09e7b

    • SSDEEP

      98304:XDqPoBhz1aRxcSUDk36SAEdhvxWa9P5O:XDqPe1Cxcxk3ZAEUadI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3283) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks