Overview

overview

10

Static

static

3

2025-02-14...ry.exe

windows7-x64

10

2025-02-14...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-14_2e5339a3ccfbe606059fcbd4ce71455e_wannacry

  • Size

    3.6MB

  • Sample

    250214-bgskwaynds

  • MD5

    2e5339a3ccfbe606059fcbd4ce71455e

  • SHA1

    cc2c34216a989d887b708239d070c3135e86c7b0

  • SHA256

    b086c64cdbda9f6340530855f30f6a71c9e75007bc29d0c65e104ce6a3a68be3

  • SHA512

    a7c6b8bf8e87ec1ffc63dd1ffee9c2dc14a0e84b3e736a59f3048a26adba78dce745f373fcf05fec67f497c2db9973b185e1e46aa8943ec8e4d5bbd98c4574d7

  • SSDEEP

    98304:Z1PoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HI:Z1Pe1Cxcxk3ZAEUadzR8yc4HI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-14_2e5339a3ccfbe606059fcbd4ce71455e_wannacry

    • Size

      3.6MB

    • MD5

      2e5339a3ccfbe606059fcbd4ce71455e

    • SHA1

      cc2c34216a989d887b708239d070c3135e86c7b0

    • SHA256

      b086c64cdbda9f6340530855f30f6a71c9e75007bc29d0c65e104ce6a3a68be3

    • SHA512

      a7c6b8bf8e87ec1ffc63dd1ffee9c2dc14a0e84b3e736a59f3048a26adba78dce745f373fcf05fec67f497c2db9973b185e1e46aa8943ec8e4d5bbd98c4574d7

    • SSDEEP

      98304:Z1PoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HI:Z1Pe1Cxcxk3ZAEUadzR8yc4HI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3344) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks