wannacry | 73de8c631d2d331a9fab22a22ac999b692b692f5111423e811051fca116488da | Triage

Sharing

General

Target

2025-02-24_22ee15358aa8ccc229d2d061817342bf_wannacry
Size

3.6MB
Sample

250224-mm5ceaxnv8
MD5

22ee15358aa8ccc229d2d061817342bf
SHA1

264a6e22eaa474dd1c16788c98200e3b1820fb43
SHA256

73de8c631d2d331a9fab22a22ac999b692b692f5111423e811051fca116488da
SHA512

369b374e3a61838473216f6ec3dc3fdf5861da63728c73781e31dd54514768479e2350ce9b6cc42740d145175ec9ed2e76bfca8463406d3e58016364e3ca8671
SSDEEP

6144:ZE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhMV9qbBLIwYQuy8XwDMR:ZwbLgPluxQhMbaIMu/wDM

Score

10^/10

wannacry defense_evasion discovery ransomware worm

Malware Config

Targets

- Target
  
  2025-02-24_22ee15358aa8ccc229d2d061817342bf_wannacry
- Size
  
  3.6MB
- MD5
  
  22ee15358aa8ccc229d2d061817342bf
- SHA1
  
  264a6e22eaa474dd1c16788c98200e3b1820fb43
- SHA256
  
  73de8c631d2d331a9fab22a22ac999b692b692f5111423e811051fca116488da
- SHA512
  
  369b374e3a61838473216f6ec3dc3fdf5861da63728c73781e31dd54514768479e2350ce9b6cc42740d145175ec9ed2e76bfca8463406d3e58016364e3ca8671
- SSDEEP
  
  6144:ZE9l9yNqIYVTH5DgSg8ajldktM0XXrs2QhMV9qbBLIwYQuy8XwDMR:ZwbLgPluxQhMbaIMu/wDM
Score

10^/10

wannacry discovery ransomware worm defense_evasion
- Modifies firewall policy service
  defense_evasion
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Wannacry family
  wannacry
- Contacts a large (3259) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydefense_evasiondiscoveryransomwareworm