Overview

overview

10

Static

static

3

2025-02-18...ry.exe

windows7-x64

10

2025-02-18...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-18_d2f6c9795f16520e7b45e3d6543e1154_wannacry

  • Size

    5.0MB

  • Sample

    250218-eyvcksxldk

  • MD5

    d2f6c9795f16520e7b45e3d6543e1154

  • SHA1

    923ae92fcb93ea78ba21892efc5275b5aa044151

  • SHA256

    5aa221115382760de0e2092f28af9946308ea4f677a354c7aab57cb8e3b89fd8

  • SHA512

    35148215fee34530ce68b50d10b3af65708dffa33dd6d188821c69ac1abe2d167d781cbb57f702520aa597f281cac52e80cec365b4e4c00bf92d4ec0e2ef6161

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H96:yDqPoBhz1aRxcSUDk36SAEdhvxWa96

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-18_d2f6c9795f16520e7b45e3d6543e1154_wannacry

    • Size

      5.0MB

    • MD5

      d2f6c9795f16520e7b45e3d6543e1154

    • SHA1

      923ae92fcb93ea78ba21892efc5275b5aa044151

    • SHA256

      5aa221115382760de0e2092f28af9946308ea4f677a354c7aab57cb8e3b89fd8

    • SHA512

      35148215fee34530ce68b50d10b3af65708dffa33dd6d188821c69ac1abe2d167d781cbb57f702520aa597f281cac52e80cec365b4e4c00bf92d4ec0e2ef6161

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H96:yDqPoBhz1aRxcSUDk36SAEdhvxWa96

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (2996) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks