Overview

overview

10

Static

static

3

2025-02-22...ry.exe

windows7-x64

10

2025-02-22...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-22_ae84c8c56f41c9a47a5aa4210c211947_wannacry

  • Size

    5.0MB

  • Sample

    250222-t7xxdstkgx

  • MD5

    ae84c8c56f41c9a47a5aa4210c211947

  • SHA1

    c7bd19fb911613c375c6ca9891167f7a9a4b3e1b

  • SHA256

    837e9e5844ee89aaad23c613f26daba7e67980598e38a6e59b863443fb6457ac

  • SHA512

    3081691c8307460b98657662e9e8e7ad98fca5769594c6405d7a9931e14bf313b6154845baea0ac6b7a55e1134b110a110920b3af232880098c922ef1acd5bd1

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1IN01HkQo6SAARdhnvxJM0H9PAMEcaEaue5c/bXZ:yDqPoBhz1auk36SAEdhvxWa9P59Uc/

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-22_ae84c8c56f41c9a47a5aa4210c211947_wannacry

    • Size

      5.0MB

    • MD5

      ae84c8c56f41c9a47a5aa4210c211947

    • SHA1

      c7bd19fb911613c375c6ca9891167f7a9a4b3e1b

    • SHA256

      837e9e5844ee89aaad23c613f26daba7e67980598e38a6e59b863443fb6457ac

    • SHA512

      3081691c8307460b98657662e9e8e7ad98fca5769594c6405d7a9931e14bf313b6154845baea0ac6b7a55e1134b110a110920b3af232880098c922ef1acd5bd1

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1IN01HkQo6SAARdhnvxJM0H9PAMEcaEaue5c/bXZ:yDqPoBhz1auk36SAEdhvxWa9P59Uc/

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3352) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks