Overview

overview

10

Static

static

3

2025-02-17...ry.exe

windows7-x64

10

2025-02-17...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-17_cf0552c9e1ec7ca0dfe7beb3a5ad6f22_wannacry

  • Size

    5.0MB

  • Sample

    250217-1wth6avns5

  • MD5

    cf0552c9e1ec7ca0dfe7beb3a5ad6f22

  • SHA1

    923d0e68e1982c4727d456620d713f52bcd89ecf

  • SHA256

    1f079b4381242d799176d32c265fa52b0d2ba5ec326184d6403bc3e76f0944b8

  • SHA512

    d15d598de16a8f8a83815b0e48e1ace0cd4c6ae84fddf7a4e980813d68ccdf6dae158fc92b1fd4c8df549acb34d7e96d873b9853cf54707c1dd8c3a46c851dad

  • SSDEEP

    6144:GE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhMV9qbBLIwYQuy8DLq1eNVDvMrHC+VH:GwbLgPluxQhMbaIMu7L5NVErCA4z6

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-17_cf0552c9e1ec7ca0dfe7beb3a5ad6f22_wannacry

    • Size

      5.0MB

    • MD5

      cf0552c9e1ec7ca0dfe7beb3a5ad6f22

    • SHA1

      923d0e68e1982c4727d456620d713f52bcd89ecf

    • SHA256

      1f079b4381242d799176d32c265fa52b0d2ba5ec326184d6403bc3e76f0944b8

    • SHA512

      d15d598de16a8f8a83815b0e48e1ace0cd4c6ae84fddf7a4e980813d68ccdf6dae158fc92b1fd4c8df549acb34d7e96d873b9853cf54707c1dd8c3a46c851dad

    • SSDEEP

      6144:GE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhMV9qbBLIwYQuy8DLq1eNVDvMrHC+VH:GwbLgPluxQhMbaIMu7L5NVErCA4z6

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3355) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks