wannacry | 97c2547aee3f7f293c81897608c649bc144e6f9cc30293e1b23afe0e9fc5ae99

User tags

Assigned on submission by the user, not by sandbox detections.

origin:honeypot server:de source:dionaea sha256:97c2547aee3f7f293c81897608c649bc144e6f9cc30293e1b23afe0e9fc5ae99

Sharing

Copy URL Twitter E-mail

General

Target
97c2547aee3f7f293c81897608c649bc144e6f9cc30293e1b23afe0e9fc5ae99
Size 5.0MB
Sample260428-be148sb12v
SHA256 97c2547aee3f7f293c81897608c649bc144e6f9cc30293e1b23afe0e9fc5ae99
MD5 bff63cefd43b6a881ffc1e61dd0215ac
SHA1 577994f635567f7cde985d655d2db1bf3a652063
SHA512 bd2208c22dac53d780ea302682691d020c26793bae96ed7b67c2b1c8c37e3d9a32f3aeac758cbb43a91152161d277152cd96043e7061963d975bb1adde211b51
SSDEEP 49152:RnnMSPbcBVQej/1INRx+TSqTdX1HkQo6SAANsRj:1nPoBhz1aRxcSUDk36SAOCj
TLSH
T1AC360205A1E51BB4D6B21FF6217B8B10537A3D5589ABA25E1760A04F0C33F1CDEE2F29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  97c2547aee3f7f293c81897608c649bc144e6f9cc30293e1b23afe0e9fc5ae99
- Size 5.0MB
- SHA256 97c2547aee3f7f293c81897608c649bc144e6f9cc30293e1b23afe0e9fc5ae99
- MD5 bff63cefd43b6a881ffc1e61dd0215ac
- SHA1 577994f635567f7cde985d655d2db1bf3a652063
- SHA512 bd2208c22dac53d780ea302682691d020c26793bae96ed7b67c2b1c8c37e3d9a32f3aeac758cbb43a91152161d277152cd96043e7061963d975bb1adde211b51
- SSDEEP 49152:RnnMSPbcBVQej/1INRx+TSqTdX1HkQo6SAANsRj:1nPoBhz1aRxcSUDk36SAOCj
- TLSH
  T1AC360205A1E51BB4D6B21FF6217B8B10537A3D5589ABA25E1760A04F0C33F1CDEE2F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery wannacry ransomware worm
- Family: Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (4195) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Targets

Family: Wannacry

Contacts a large (4195) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2