Overview

overview

10

Static

static

3

2025-02-23...ry.exe

windows7-x64

10

2025-02-23...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-23_0c6cdbbc5f3aa8163a5ed91b00554190_wannacry

  • Size

    5.0MB

  • Sample

    250223-mxz6favpy5

  • MD5

    0c6cdbbc5f3aa8163a5ed91b00554190

  • SHA1

    5942437eddd243be0ee97fa13683279369e37ddb

  • SHA256

    d36e3f6174e254a609a0a1686ed68b5d6c4f773b661ed18bae1a0dd5e98d22f9

  • SHA512

    2666ed41126edbca6d8cf3b0b300d06105851f13cc23ce1cdf7147263dc4b2f45a30963f99ae16c5d492b7c7821e7edc58e01008c6abfd13c0211dfeb3784c7a

  • SSDEEP

    12288:GwbLgPluxQhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+L:VbLgdeQhfdmMSirYbcMNgef02

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-23_0c6cdbbc5f3aa8163a5ed91b00554190_wannacry

    • Size

      5.0MB

    • MD5

      0c6cdbbc5f3aa8163a5ed91b00554190

    • SHA1

      5942437eddd243be0ee97fa13683279369e37ddb

    • SHA256

      d36e3f6174e254a609a0a1686ed68b5d6c4f773b661ed18bae1a0dd5e98d22f9

    • SHA512

      2666ed41126edbca6d8cf3b0b300d06105851f13cc23ce1cdf7147263dc4b2f45a30963f99ae16c5d492b7c7821e7edc58e01008c6abfd13c0211dfeb3784c7a

    • SSDEEP

      12288:GwbLgPluxQhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+L:VbLgdeQhfdmMSirYbcMNgef02

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3242) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks