wannacry | cf3831262e37ffc62d2cae2c1fdad314cc41d075233dd079aff6b7c6418d563e

User tags

Assigned on submission by the user, not by sandbox detections.

origin:honeypot server:de source:dionaea sha256:cf3831262e37ffc62d2cae2c1fdad314cc41d075233dd079aff6b7c6418d563e

Sharing

Copy URL Twitter E-mail

General

Target
cf3831262e37ffc62d2cae2c1fdad314cc41d075233dd079aff6b7c6418d563e
Size 5.0MB
Sample260428-er9tpadt81
SHA256 cf3831262e37ffc62d2cae2c1fdad314cc41d075233dd079aff6b7c6418d563e
MD5 0b9f2e1ea54d67bd9697f2ef61b38bd3
SHA1 629a9796e7a29cb2bd1092d85905b7bfa92b4c3e
SHA512 9a8d7ed228e710dcae58570eca53cf4bade05b1d9238620f1798c2ebc952ed387633df82aeb42c4a5cad1fc7a1d98d5c8feced065e96634b9916ee3423ad56b8
SSDEEP 24576:SbLgddQhfdmMSirYbcMNgef0QeQjGVVXmiHkQg6eX6SASk+RdhA:SnAQqMSPbcBVQejnX1HkQo6SAARdh
TLSH
T133362365B63CD5FCC10A10B864674522B7B33C9A22FE560FCF908A571D13B64FAA4B4B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  cf3831262e37ffc62d2cae2c1fdad314cc41d075233dd079aff6b7c6418d563e
- Size 5.0MB
- SHA256 cf3831262e37ffc62d2cae2c1fdad314cc41d075233dd079aff6b7c6418d563e
- MD5 0b9f2e1ea54d67bd9697f2ef61b38bd3
- SHA1 629a9796e7a29cb2bd1092d85905b7bfa92b4c3e
- SHA512 9a8d7ed228e710dcae58570eca53cf4bade05b1d9238620f1798c2ebc952ed387633df82aeb42c4a5cad1fc7a1d98d5c8feced065e96634b9916ee3423ad56b8
- SSDEEP 24576:SbLgddQhfdmMSirYbcMNgef0QeQjGVVXmiHkQg6eX6SASk+RdhA:SnAQqMSPbcBVQejnX1HkQo6SAARdh
- TLSH
  T133362365B63CD5FCC10A10B864674522B7B33C9A22FE560FCF908A571D13B64FAA4B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery wannacry ransomware worm
- Family: Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3632) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Targets

Family: Wannacry

Contacts a large (3632) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2