wannacry

Resubmissions

21/02/2025, 12:48

250221-p2asfssmdj 10

21/02/2025, 09:11

250221-k53v7aymfm 10

21/02/2025, 06:19

250221-g3jgzsvmcx 10

Sharing

Copy URL

Twitter E-mail

General

Target

2025-02-21_aa65de92680a05ce79fa7e59dcbe4ebb_wannacry
Size

5.0MB
Sample

250221-g3jgzsvmcx
MD5

aa65de92680a05ce79fa7e59dcbe4ebb
SHA1

799f1a0ece653b6ffd4b763db76932fff15572f4
SHA256

3c0607e8cd03809a00c7abaf0d6da1627f2ceac552a84aa2198c7993300ca8d7
SHA512

55465e062e81ddc39beda8a0e5a9daefa9775dedb45462af593f8633080010a796eaf2f4b07f6b84cb3ab31e40f95347c5520a183ef11fec6e963e6ce654d4ae
SSDEEP

49152:2nAQqMSPbcBVQejf6SAARdhnvxJM0H9PAMEcaEau3R8yAH1plAHw:yDqPoBhD6SAEdhvxWa9P593R8yAVp2Hw

Score

10^/10

Malware Config

Targets

- Target
  
  2025-02-21_aa65de92680a05ce79fa7e59dcbe4ebb_wannacry
- Size
  
  5.0MB
- MD5
  
  aa65de92680a05ce79fa7e59dcbe4ebb
- SHA1
  
  799f1a0ece653b6ffd4b763db76932fff15572f4
- SHA256
  
  3c0607e8cd03809a00c7abaf0d6da1627f2ceac552a84aa2198c7993300ca8d7
- SHA512
  
  55465e062e81ddc39beda8a0e5a9daefa9775dedb45462af593f8633080010a796eaf2f4b07f6b84cb3ab31e40f95347c5520a183ef11fec6e963e6ce654d4ae
- SSDEEP
  
  49152:2nAQqMSPbcBVQejf6SAARdhnvxJM0H9PAMEcaEau3R8yAH1plAHw:yDqPoBhD6SAEdhvxWa9P593R8yAVp2Hw
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Wannacry family
  wannacry
- Contacts a large (3247) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Wannacry family

Contacts a large (3247) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2