Resubmissions

18/05/2025, 14:24

250518-rqz93stky9 10

18/05/2025, 09:49

250518-ltlcfaal6v 10

General

  • Target

    2025-05-18_2edf486aef5d4a22dd128c0741027e9f_elex_wannacry

  • Size

    3.6MB

  • Sample

    250518-ltlcfaal6v

  • MD5

    2edf486aef5d4a22dd128c0741027e9f

  • SHA1

    ef7d8dc510005ef9d9485c462d633fed8c4722e5

  • SHA256

    f4bc1d9b257de3bd352a2870ade6e22533bdb35e40bdf34ccff60778b25833ce

  • SHA512

    0ee7bdae2b2ae0e4d32891159efec60b9e5aa437897b3378a74555b2268fe5a88da63fb2bfa3aef89e3aba87246079307ed2ffb0104833b2a3563005053ef483

  • SSDEEP

    49152:2nAQqMSPbcBVZINRx+TSqTdX1HkQo6SAARdhnvxJM:yDqPoBXaRxcSUDk36SAEdhvxW

Malware Config

Targets

    • Target

      2025-05-18_2edf486aef5d4a22dd128c0741027e9f_elex_wannacry

    • Size

      3.6MB

    • MD5

      2edf486aef5d4a22dd128c0741027e9f

    • SHA1

      ef7d8dc510005ef9d9485c462d633fed8c4722e5

    • SHA256

      f4bc1d9b257de3bd352a2870ade6e22533bdb35e40bdf34ccff60778b25833ce

    • SHA512

      0ee7bdae2b2ae0e4d32891159efec60b9e5aa437897b3378a74555b2268fe5a88da63fb2bfa3aef89e3aba87246079307ed2ffb0104833b2a3563005053ef483

    • SSDEEP

      49152:2nAQqMSPbcBVZINRx+TSqTdX1HkQo6SAARdhnvxJM:yDqPoBXaRxcSUDk36SAEdhvxW

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Wannacry family

    • Contacts a large (3193) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v16

Tasks