Overview

overview

10

Static

static

3

2025-02-21...ry.exe

windows7-x64

10

2025-02-21...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-21_fd19db7dee69664b704e673b98f3e768_wannacry

  • Size

    5.0MB

  • Sample

    250221-vphv7awnfk

  • MD5

    fd19db7dee69664b704e673b98f3e768

  • SHA1

    f3ce71e265d28f9859d19c546c1f2027389b8d48

  • SHA256

    380d7afc0e5d601080a539f0bded7c11f3b8605d5ec41f3d56128ac8454663b3

  • SHA512

    aa77d7124f81e502b38dc25308a62b357a261221d3878ceafb4cf90b4704f82f543b53ae6d619f76266e7dafb4b986a04ee305e2d916300839dc4c5b2fd3e027

  • SSDEEP

    24576:QbLguriBJMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmiH:QnGMSPbcBVQej/1INRx+TSqTdX1H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-21_fd19db7dee69664b704e673b98f3e768_wannacry

    • Size

      5.0MB

    • MD5

      fd19db7dee69664b704e673b98f3e768

    • SHA1

      f3ce71e265d28f9859d19c546c1f2027389b8d48

    • SHA256

      380d7afc0e5d601080a539f0bded7c11f3b8605d5ec41f3d56128ac8454663b3

    • SHA512

      aa77d7124f81e502b38dc25308a62b357a261221d3878ceafb4cf90b4704f82f543b53ae6d619f76266e7dafb4b986a04ee305e2d916300839dc4c5b2fd3e027

    • SSDEEP

      24576:QbLguriBJMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmiH:QnGMSPbcBVQej/1INRx+TSqTdX1H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3267) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks