Overview

overview

10

Static

static

3

2025-02-22...ry.exe

windows7-x64

10

2025-02-22...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-22_38dbbe100df72260f36d1dca0ce9cce2_wannacry

  • Size

    5.0MB

  • Sample

    250222-t929wstrcl

  • MD5

    38dbbe100df72260f36d1dca0ce9cce2

  • SHA1

    d83f2148dbbd57887ecf2035202078c9bb1c9a62

  • SHA256

    44ddc6f4c16ffce5a4a52d4b87a88cabdbea621210a536cb28bc51cc8ba8daa7

  • SHA512

    7016d209b719003219e0aa2b3ceff79c21b904ef0347a82b6f520610edccb8536846567eaa6277e66a347becc4e411e6987e634aa0730f25d7aae081ac56aeba

  • SSDEEP

    49152:2npEKUacBVQej/1INRx+TSqTdX1HkQo6SAARdhnvDf:ypyfBhz1aRxcSUDk36SAEdhvb

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-22_38dbbe100df72260f36d1dca0ce9cce2_wannacry

    • Size

      5.0MB

    • MD5

      38dbbe100df72260f36d1dca0ce9cce2

    • SHA1

      d83f2148dbbd57887ecf2035202078c9bb1c9a62

    • SHA256

      44ddc6f4c16ffce5a4a52d4b87a88cabdbea621210a536cb28bc51cc8ba8daa7

    • SHA512

      7016d209b719003219e0aa2b3ceff79c21b904ef0347a82b6f520610edccb8536846567eaa6277e66a347becc4e411e6987e634aa0730f25d7aae081ac56aeba

    • SSDEEP

      49152:2npEKUacBVQej/1INRx+TSqTdX1HkQo6SAARdhnvDf:ypyfBhz1aRxcSUDk36SAEdhvb

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3161) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks