Overview

overview

10

Static

static

3

2025-02-16...ry.exe

windows7-x64

10

2025-02-16...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-16_ca61e7724d6e900bf1bcf1ca57544f4b_wannacry

  • Size

    5.0MB

  • Sample

    250216-3a4hcaskhk

  • MD5

    ca61e7724d6e900bf1bcf1ca57544f4b

  • SHA1

    f571fa9ee5906b7967386f5294cdd1f1becee0e5

  • SHA256

    d3128f02830a3f396c49df8c3ba26d7389bfc063c802344711dd52b5d94a85c1

  • SHA512

    945a12323a48db77badb838bb038cf4355563fcdbce596d0b147edbab37254ad69287eb7a3712ac4a0785215871aa1bf94bafd10956c13db06b05267559267ae

  • SSDEEP

    49152:2nAQqMSPbcBVH6SAARdhnvxJM0H9PAMEcaEau3R8yAH1plAHh:yDqPoB56SAEdhvxWa9P593R8yAVp2Hh

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-16_ca61e7724d6e900bf1bcf1ca57544f4b_wannacry

    • Size

      5.0MB

    • MD5

      ca61e7724d6e900bf1bcf1ca57544f4b

    • SHA1

      f571fa9ee5906b7967386f5294cdd1f1becee0e5

    • SHA256

      d3128f02830a3f396c49df8c3ba26d7389bfc063c802344711dd52b5d94a85c1

    • SHA512

      945a12323a48db77badb838bb038cf4355563fcdbce596d0b147edbab37254ad69287eb7a3712ac4a0785215871aa1bf94bafd10956c13db06b05267559267ae

    • SSDEEP

      49152:2nAQqMSPbcBVH6SAARdhnvxJM0H9PAMEcaEau3R8yAH1plAHh:yDqPoB56SAEdhvxWa9P593R8yAVp2Hh

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3158) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks