Overview

overview

10

Static

static

3

2025-03-29...ry.exe

windows7-x64

10

2025-03-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-29_d45384e349f28382e3b7d9669d563e0b_wannacry

  • Size

    3.6MB

  • Sample

    250329-e9976szkt4

  • MD5

    d45384e349f28382e3b7d9669d563e0b

  • SHA1

    42cf9543851c4a2969a1cde574bc8adcad0e4b4d

  • SHA256

    0a44e0c3efc5625ca990fe6f607404a6cfa560db6a7cb100aea64eea74d95c92

  • SHA512

    d8f43c9835a6b96e9ecd135d1fc05062ae38af867c2303941b3d81f0962cae660933c39531b3e9e55d631df52d4c4d2410319c43a61dc5d19923acde81e6f00d

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcMNgef0QeQPD8kIqRYoAdNLKz6626:2nAQqMSPbcBVQeK1INR

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-03-29_d45384e349f28382e3b7d9669d563e0b_wannacry

    • Size

      3.6MB

    • MD5

      d45384e349f28382e3b7d9669d563e0b

    • SHA1

      42cf9543851c4a2969a1cde574bc8adcad0e4b4d

    • SHA256

      0a44e0c3efc5625ca990fe6f607404a6cfa560db6a7cb100aea64eea74d95c92

    • SHA512

      d8f43c9835a6b96e9ecd135d1fc05062ae38af867c2303941b3d81f0962cae660933c39531b3e9e55d631df52d4c4d2410319c43a61dc5d19923acde81e6f00d

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcMNgef0QeQPD8kIqRYoAdNLKz6626:2nAQqMSPbcBVQeK1INR

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3246) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks