wannacry | 9ec4cb23d7d22deee6c274d83841c80c66d74b4e78fe66b0f74b764a761b6187

User tags

Assigned on submission by the user, not by sandbox detections.

origin:honeypot server:de source:dionaea sha256:9ec4cb23d7d22deee6c274d83841c80c66d74b4e78fe66b0f74b764a761b6187

Sharing

Copy URL Twitter E-mail

General

Target
9ec4cb23d7d22deee6c274d83841c80c66d74b4e78fe66b0f74b764a761b6187
Size 5.0MB
Sample260428-b284csct4s
SHA256 9ec4cb23d7d22deee6c274d83841c80c66d74b4e78fe66b0f74b764a761b6187
MD5 f0af40572ec25062172e0e5accdd40b1
SHA1 8185e4906c436352daeb1a8c453523e9815d5138
SHA512 8000d70b2c0e4d210b605dd1296ec1d459336eea8812669c24f33b564ed6053c904bcf5bb41be5850e8cf79b01f323a2337fb3aa9474b7fe72125880cb176d4c
SSDEEP 24576:SbLgddQhfdmMSirYbcMNgef0SO6LLuYAMEcpcL7nEaut/8uME76:SnAQqMSPbcBVeAMEcaEau3R
TLSH
T1CC3633625A1C92BCE01517709033453E9B7B3CA1627E961FC7A49EC23D133E6BBA0F56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  9ec4cb23d7d22deee6c274d83841c80c66d74b4e78fe66b0f74b764a761b6187
- Size 5.0MB
- SHA256 9ec4cb23d7d22deee6c274d83841c80c66d74b4e78fe66b0f74b764a761b6187
- MD5 f0af40572ec25062172e0e5accdd40b1
- SHA1 8185e4906c436352daeb1a8c453523e9815d5138
- SHA512 8000d70b2c0e4d210b605dd1296ec1d459336eea8812669c24f33b564ed6053c904bcf5bb41be5850e8cf79b01f323a2337fb3aa9474b7fe72125880cb176d4c
- SSDEEP 24576:SbLgddQhfdmMSirYbcMNgef0SO6LLuYAMEcpcL7nEaut/8uME76:SnAQqMSPbcBVeAMEcaEau3R
- TLSH
  T1CC3633625A1C92BCE01517709033453E9B7B3CA1627E961FC7A49EC23D133E6BBA0F56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery wannacry ransomware worm
- Family: Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (2423) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Targets

Family: Wannacry

Contacts a large (2423) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2