wannacry | 5b4f44b3f4cf218b37c5dd83f2944edde2e64d6d730ddc1fd92800062158bc9f

User tags

Assigned on submission by the user, not by sandbox detections.

origin:honeypot server:de source:dionaea sha256:5b4f44b3f4cf218b37c5dd83f2944edde2e64d6d730ddc1fd92800062158bc9f

Sharing

Copy URL Twitter E-mail

General

Target
5b4f44b3f4cf218b37c5dd83f2944edde2e64d6d730ddc1fd92800062158bc9f
Size 5.0MB
Sample260427-y3ebpsht2v
SHA256 5b4f44b3f4cf218b37c5dd83f2944edde2e64d6d730ddc1fd92800062158bc9f
MD5 74b16d9cf7d09b4878401401a481223b
SHA1 5dd89148c34e778d7f3ac6cd0c86c591cecc851d
SHA512 272e8f41f116aa614ea3425ef5807d4f2a37243fb4738df335b90d6fedb7d1c071a83e06b40c66fce92c3abb4dce12061af4950154cd12c5210837114ecced4f
SSDEEP 12288:yvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+:SbLgddQhfdmMSirYbcMNgef0
TLSH
T1D836232A766C91FCC11A6234A0634936E6B77C6A22BD970F8B948B560D13350FFB4F47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  5b4f44b3f4cf218b37c5dd83f2944edde2e64d6d730ddc1fd92800062158bc9f
- Size 5.0MB
- SHA256 5b4f44b3f4cf218b37c5dd83f2944edde2e64d6d730ddc1fd92800062158bc9f
- MD5 74b16d9cf7d09b4878401401a481223b
- SHA1 5dd89148c34e778d7f3ac6cd0c86c591cecc851d
- SHA512 272e8f41f116aa614ea3425ef5807d4f2a37243fb4738df335b90d6fedb7d1c071a83e06b40c66fce92c3abb4dce12061af4950154cd12c5210837114ecced4f
- SSDEEP 12288:yvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+:SbLgddQhfdmMSirYbcMNgef0
- TLSH
  T1D836232A766C91FCC11A6234A0634936E6B77C6A22BD970F8B948B560D13350FFB4F47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery wannacry ransomware worm
- Family: Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (4188) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Targets

Family: Wannacry

Contacts a large (4188) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2