wannacry | 740aa601fb4a83fd2b2dbd4f3bea3aaaa4ed40b5dddbf1c8f2ad629a528408ce

User tags

Assigned on submission by the user, not by sandbox detections.

origin:honeypot server:de source:dionaea sha256:740aa601fb4a83fd2b2dbd4f3bea3aaaa4ed40b5dddbf1c8f2ad629a528408ce

Sharing

Copy URL Twitter E-mail

General

Target
740aa601fb4a83fd2b2dbd4f3bea3aaaa4ed40b5dddbf1c8f2ad629a528408ce
Size 5.0MB
Sample260427-2b18yaav3v
SHA256 740aa601fb4a83fd2b2dbd4f3bea3aaaa4ed40b5dddbf1c8f2ad629a528408ce
MD5 7c21d2ad87c267fb16cd49c78b4a1ec2
SHA1 b0295c17bc83cb111932b27c1aaef783cbe1e3a1
SHA512 96b3dfaa40d9131967c5fe89c56ebda658f87cdff1e28d9809df42d31556e162a35e89232d2359a52d5956fd871598ef44f0e92ce2fe472510dd530ba1b15f05
SSDEEP 6144:yE9l9yUqIYVTH5DgSg8ajldktM0XXrP2QhMV9qbBLIwYQuy8DLq1eNVDvM:yvbLgPlu+QhMbaIMu7L5NVE
TLSH
T16836F11A67ACC1BCC41A4131A4634A7AEBB7BC595278970F4B58CB650E63390BFB4F07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  740aa601fb4a83fd2b2dbd4f3bea3aaaa4ed40b5dddbf1c8f2ad629a528408ce
- Size 5.0MB
- SHA256 740aa601fb4a83fd2b2dbd4f3bea3aaaa4ed40b5dddbf1c8f2ad629a528408ce
- MD5 7c21d2ad87c267fb16cd49c78b4a1ec2
- SHA1 b0295c17bc83cb111932b27c1aaef783cbe1e3a1
- SHA512 96b3dfaa40d9131967c5fe89c56ebda658f87cdff1e28d9809df42d31556e162a35e89232d2359a52d5956fd871598ef44f0e92ce2fe472510dd530ba1b15f05
- SSDEEP 6144:yE9l9yUqIYVTH5DgSg8ajldktM0XXrP2QhMV9qbBLIwYQuy8DLq1eNVDvM:yvbLgPlu+QhMbaIMu7L5NVE
- TLSH
  T16836F11A67ACC1BCC41A4131A4634A7AEBB7BC595278970F4B58CB650E63390BFB4F07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery wannacry ransomware worm
- Family: Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (4211) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Targets

Family: Wannacry

Contacts a large (4211) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2