Overview

overview

10

Static

static

3

2025-02-23...ry.exe

windows7-x64

10

2025-02-23...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-23_a70c848fd8d98c4ad9a362d2c2e098d8_wannacry

  • Size

    5.0MB

  • Sample

    250223-nqeftswkat

  • MD5

    a70c848fd8d98c4ad9a362d2c2e098d8

  • SHA1

    fca52d365619adccedc3862e7f715da890c792a0

  • SHA256

    346a8561456bb46853a8d1c5aa40acbc7f12e7b5209df6cb5aebd0b6000c9b96

  • SHA512

    a9bd7c4575c703ef47f13f898bae25b168d48b99e4b4f1335469141f78b61ee703db177e01fcccf975ac827341ea6397f848625c162d0e8de6eed3ef7acbf36f

  • SSDEEP

    49152:XnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAu:XDqPoBhz1aRxcSUDk36SAd

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-02-23_a70c848fd8d98c4ad9a362d2c2e098d8_wannacry

    • Size

      5.0MB

    • MD5

      a70c848fd8d98c4ad9a362d2c2e098d8

    • SHA1

      fca52d365619adccedc3862e7f715da890c792a0

    • SHA256

      346a8561456bb46853a8d1c5aa40acbc7f12e7b5209df6cb5aebd0b6000c9b96

    • SHA512

      a9bd7c4575c703ef47f13f898bae25b168d48b99e4b4f1335469141f78b61ee703db177e01fcccf975ac827341ea6397f848625c162d0e8de6eed3ef7acbf36f

    • SSDEEP

      49152:XnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAu:XDqPoBhz1aRxcSUDk36SAd

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3056) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks