wannacry | 115886e6f0f66f3add24bd9c1950f2d63c82d0ef7c79a2cb7c7e3e35100b1d32

User tags

Assigned on submission by the user, not by sandbox detections.

origin:honeypot server:de source:dionaea sha256:115886e6f0f66f3add24bd9c1950f2d63c82d0ef7c79a2cb7c7e3e35100b1d32

Sharing

Copy URL Twitter E-mail

General

Target
115886e6f0f66f3add24bd9c1950f2d63c82d0ef7c79a2cb7c7e3e35100b1d32
Size 5.0MB
Sample260427-rbvfaac15v
SHA256 115886e6f0f66f3add24bd9c1950f2d63c82d0ef7c79a2cb7c7e3e35100b1d32
MD5 6b43e7d41a918aec563f6926e63d81d3
SHA1 b7f6dad51bf9ccc50fb9a472df740ecdbf6efa12
SHA512 e6bddb2e76d10939ecc14308fbe65d2ee4c1e3ead331d5151cd27a9a89b683b707dc281775d05553c932c51c236ff7115904e18b89db2ad22fbc0176d814a244
SSDEEP 98304:+DqPoBhz1aRxcSUDk36StAvzUs6Q5GksluAQLeFo:+DqPe1Cxcxk3ZSXd5r6
TLSH
T1F23605838007156CE46DCA71C2ED1BA0C92B5EA57A6CB08D6F17BA4A27F31D3F596D03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  115886e6f0f66f3add24bd9c1950f2d63c82d0ef7c79a2cb7c7e3e35100b1d32
- Size 5.0MB
- SHA256 115886e6f0f66f3add24bd9c1950f2d63c82d0ef7c79a2cb7c7e3e35100b1d32
- MD5 6b43e7d41a918aec563f6926e63d81d3
- SHA1 b7f6dad51bf9ccc50fb9a472df740ecdbf6efa12
- SHA512 e6bddb2e76d10939ecc14308fbe65d2ee4c1e3ead331d5151cd27a9a89b683b707dc281775d05553c932c51c236ff7115904e18b89db2ad22fbc0176d814a244
- SSDEEP 98304:+DqPoBhz1aRxcSUDk36StAvzUs6Q5GksluAQLeFo:+DqPe1Cxcxk3ZSXd5r6
- TLSH
  T1F23605838007156CE46DCA71C2ED1BA0C92B5EA57A6CB08D6F17BA4A27F31D3F596D03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery wannacry ransomware worm
- Family: Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (4178) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Targets

Family: Wannacry

Contacts a large (4178) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2