Overview

overview

10

Static

static

3

2025-02-06...ry.exe

windows7-x64

10

2025-02-06...ry.exe

windows10-2004-x64

10

Resubmissions

06-02-2025 13:07

250206-qcvl1avret 10

06-02-2025 12:55

250206-p5386sxlgn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-06_72d92287d385c4fdb86894713d70cb43_wannacry

  • Size

    5.0MB

  • Sample

    250206-qcvl1avret

  • MD5

    72d92287d385c4fdb86894713d70cb43

  • SHA1

    91cc65bd4c65232ab58a70ed2acb5d021e9e8392

  • SHA256

    8176a41951eb1a1a73e97a97840f26ba08c026d3814afff9bf550313de240d42

  • SHA512

    a2e2b684a25c6a567d255d0226b5bc231f600f1fc8c3505ae0e41cdaaf35be4fd3ff5752d7bf23da55249f8a93a70fc897ab0c29c87b3b7ad9930778454e6a13

  • SSDEEP

    6144:GE9l9ynqIYVTH5DgSgNajldktM0XXrCIagQhMV9qbBLIwYQuy8DLq:GebLgmluCtgQhMbaIMu7L

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-06_72d92287d385c4fdb86894713d70cb43_wannacry

    • Size

      5.0MB

    • MD5

      72d92287d385c4fdb86894713d70cb43

    • SHA1

      91cc65bd4c65232ab58a70ed2acb5d021e9e8392

    • SHA256

      8176a41951eb1a1a73e97a97840f26ba08c026d3814afff9bf550313de240d42

    • SHA512

      a2e2b684a25c6a567d255d0226b5bc231f600f1fc8c3505ae0e41cdaaf35be4fd3ff5752d7bf23da55249f8a93a70fc897ab0c29c87b3b7ad9930778454e6a13

    • SSDEEP

      6144:GE9l9ynqIYVTH5DgSgNajldktM0XXrCIagQhMV9qbBLIwYQuy8DLq:GebLgmluCtgQhMbaIMu7L

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3156) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks