wannacry | 30623a63bf1bb8bd984398ffd47f5fed5c55cd50e4c1be1027fac721c89bce0d

User tags

Assigned on submission by the user, not by sandbox detections.

origin:honeypot server:us source:dionaea sha256:30623a63bf1bb8bd984398ffd47f5fed5c55cd50e4c1be1027fac721c89bce0d

Sharing

Copy URL Twitter E-mail

General

Target
30623a63bf1bb8bd984398ffd47f5fed5c55cd50e4c1be1027fac721c89bce0d
Size 5.0MB
Sample260429-swy5msg17r
SHA256 30623a63bf1bb8bd984398ffd47f5fed5c55cd50e4c1be1027fac721c89bce0d
MD5 24ae6c148386737305ec6575835143a5
SHA1 eb5c9a4d1b3011b60d59a16cb5e21ab9d9db90c7
SHA512 900adc6a2b6431f81fb7a1cc7ff8cb17f19b1869c8258b4428582570bbc698008aee38e3ddb38cae37a5ba7eab9ce85ab48fb6dc6cbf6751c5a01a0d381fcf35
SSDEEP 49152:RnnMSPbcBVQej/GXTh+Mo499OM8emamM2/X6RSgWq:1nPoBhzGX9+MDHODemamMIX6RSTq
TLSH
T1C93623C9A9DC41FFD62B6B3975394D891BF33C5CB15A536BA39485B78C23781F808A08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  30623a63bf1bb8bd984398ffd47f5fed5c55cd50e4c1be1027fac721c89bce0d
- Size 5.0MB
- SHA256 30623a63bf1bb8bd984398ffd47f5fed5c55cd50e4c1be1027fac721c89bce0d
- MD5 24ae6c148386737305ec6575835143a5
- SHA1 eb5c9a4d1b3011b60d59a16cb5e21ab9d9db90c7
- SHA512 900adc6a2b6431f81fb7a1cc7ff8cb17f19b1869c8258b4428582570bbc698008aee38e3ddb38cae37a5ba7eab9ce85ab48fb6dc6cbf6751c5a01a0d381fcf35
- SSDEEP 49152:RnnMSPbcBVQej/GXTh+Mo499OM8emamM2/X6RSgWq:1nPoBhzGX9+MDHODemamMIX6RSTq
- TLSH
  T1C93623C9A9DC41FFD62B6B3975394D891BF33C5CB15A536BA39485B78C23781F808A08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery wannacry ransomware worm
- Family: Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (4196) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Targets

Family: Wannacry

Contacts a large (4196) amount of remote hosts

Executes dropped EXE

Creates a large amount of network flows

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2