Overview

overview

10

Static

static

3

2025-04-14...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-14_7c1fc49536f2aa0c0649ed941604b59d_elex_wannacry

  • Size

    3.6MB

  • Sample

    250414-e3rggsypw8

  • MD5

    7c1fc49536f2aa0c0649ed941604b59d

  • SHA1

    c6575fc331feb950b7c6652ce0110ce8e6a095ff

  • SHA256

    745aabf781068ff7381e2c3ac57982767e73826c6df74c54d64c7ccfa11dcb62

  • SHA512

    2d3ac7799438d4c85c0fe5ee64897fc36efc60f06c7d4d282057ff20f3d99885c298d3120bdf1ce134e73128b91215d37f916f204f62fbe48738b1d18b4c5882

  • SSDEEP

    49152:2nAQqMSPbcBVQej/dRdhnvxJM0H9PAMEcaEau3R8yAH1plAHI:yDqPoBhzvdhvxWa9P593R8yAVp2HI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2025-04-14_7c1fc49536f2aa0c0649ed941604b59d_elex_wannacry

    • Size

      3.6MB

    • MD5

      7c1fc49536f2aa0c0649ed941604b59d

    • SHA1

      c6575fc331feb950b7c6652ce0110ce8e6a095ff

    • SHA256

      745aabf781068ff7381e2c3ac57982767e73826c6df74c54d64c7ccfa11dcb62

    • SHA512

      2d3ac7799438d4c85c0fe5ee64897fc36efc60f06c7d4d282057ff20f3d99885c298d3120bdf1ce134e73128b91215d37f916f204f62fbe48738b1d18b4c5882

    • SSDEEP

      49152:2nAQqMSPbcBVQej/dRdhnvxJM0H9PAMEcaEau3R8yAH1plAHI:yDqPoBhzvdhvxWa9P593R8yAVp2HI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Wannacry family

      wannacry

    • Contacts a large (3358) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks