Overview

overview

10

Static

static

3

2025-02-22...ry.exe

windows7-x64

10

2025-02-22...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-22_89b77d84ed7cb8f128554bd237c7d11b_wannacry

  • Size

    3.6MB

  • Sample

    250222-enffnsyjdk

  • MD5

    89b77d84ed7cb8f128554bd237c7d11b

  • SHA1

    97a26f61a94dd228033b28a734c4645af83d93df

  • SHA256

    42f11a1c0b962f9443c8cdace7b203d398fc0137af55dc2d9f978370be15b8e5

  • SHA512

    44551e2e4b20d984517c051fdc0ed88c9622fc784fd556c17627947e5223b644aef7883a10cdf52b20e999b42ed969e9dfb95ff18cc76f5a0e449283597ed5b0

  • SSDEEP

    49152:XnHQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9:XwqPoBhz1aRxcSUDk36SAEdhvxWa9

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-22_89b77d84ed7cb8f128554bd237c7d11b_wannacry

    • Size

      3.6MB

    • MD5

      89b77d84ed7cb8f128554bd237c7d11b

    • SHA1

      97a26f61a94dd228033b28a734c4645af83d93df

    • SHA256

      42f11a1c0b962f9443c8cdace7b203d398fc0137af55dc2d9f978370be15b8e5

    • SHA512

      44551e2e4b20d984517c051fdc0ed88c9622fc784fd556c17627947e5223b644aef7883a10cdf52b20e999b42ed969e9dfb95ff18cc76f5a0e449283597ed5b0

    • SSDEEP

      49152:XnHQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9:XwqPoBhz1aRxcSUDk36SAEdhvxWa9

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3253) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks