Overview

overview

10

Static

static

3

2025-02-22...ry.exe

windows7-x64

10

2025-02-22...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-22_1b46d0560f935d08675fafd883a1e627_wannacry

  • Size

    5.0MB

  • Sample

    250222-a4d6bsvkhk

  • MD5

    1b46d0560f935d08675fafd883a1e627

  • SHA1

    a0620d9bf3a03bcdd2d69fa4024588e65d9a3458

  • SHA256

    94046e8b74d3b61a0f0d417ba7f393a4cbae73c1892ec3c53fef353726099024

  • SHA512

    8aa386c5d19c0bf4f158092d6eb8bbed8933b5b6bd7164a6c813aa71d11926ca79fbebeec95a9f75e4de0901846bf58671c594592411777fd630c227807f86b6

  • SSDEEP

    49152:XnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAI:XDqPoBhz1aRxcSUDk36SAp

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-22_1b46d0560f935d08675fafd883a1e627_wannacry

    • Size

      5.0MB

    • MD5

      1b46d0560f935d08675fafd883a1e627

    • SHA1

      a0620d9bf3a03bcdd2d69fa4024588e65d9a3458

    • SHA256

      94046e8b74d3b61a0f0d417ba7f393a4cbae73c1892ec3c53fef353726099024

    • SHA512

      8aa386c5d19c0bf4f158092d6eb8bbed8933b5b6bd7164a6c813aa71d11926ca79fbebeec95a9f75e4de0901846bf58671c594592411777fd630c227807f86b6

    • SSDEEP

      49152:XnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAI:XDqPoBhz1aRxcSUDk36SAp

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3333) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks