Overview

overview

10

Static

static

3

2025-02-07...ry.exe

windows7-x64

10

2025-02-07...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-07_01a7ca73241f235c34e37fe2e3eb49d2_wannacry

  • Size

    2.2MB

  • Sample

    250207-e4w4cszqdn

  • MD5

    01a7ca73241f235c34e37fe2e3eb49d2

  • SHA1

    95fb1655649225a8a47ede593676215effadb635

  • SHA256

    6e3bc36f16bf8995f102a33526f696f968cbcb2f42435bfd6fab9925bdddcdde

  • SHA512

    5c0f0bf283e7409c26a05b989826462c75de6595d0aa4e69d664620595dc8a0a3a0d383b561fb16ac0ae2ade383c049ee1d90c71ba99aa774411a8ce50008482

  • SSDEEP

    24576:QbLguriBJ8SirYbcMNgef0QwbOSSqTPVXmiHkQg6eX6SASk+RdhAdmvn:QnG8SPbcBVQSSqTdX1HkQo6SAARdhnvn

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-07_01a7ca73241f235c34e37fe2e3eb49d2_wannacry

    • Size

      2.2MB

    • MD5

      01a7ca73241f235c34e37fe2e3eb49d2

    • SHA1

      95fb1655649225a8a47ede593676215effadb635

    • SHA256

      6e3bc36f16bf8995f102a33526f696f968cbcb2f42435bfd6fab9925bdddcdde

    • SHA512

      5c0f0bf283e7409c26a05b989826462c75de6595d0aa4e69d664620595dc8a0a3a0d383b561fb16ac0ae2ade383c049ee1d90c71ba99aa774411a8ce50008482

    • SSDEEP

      24576:QbLguriBJ8SirYbcMNgef0QwbOSSqTPVXmiHkQg6eX6SASk+RdhAdmvn:QnG8SPbcBVQSSqTdX1HkQo6SAARdhnvn

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3226) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks