Resubmissions

01-07-2024 14:09

240701-rf4vhsyhrk 10

01-07-2024 14:08

240701-rfj54syhpp 10

01-07-2024 11:10

240701-m9zensyapa 10

General

  • Target

    2024-07-01_75b350c8f7e67883d1ba9d71198cef1b_wannacry

  • Size

    5.0MB

  • Sample

    240701-rf4vhsyhrk

  • MD5

    75b350c8f7e67883d1ba9d71198cef1b

  • SHA1

    833a369367059b5ae28542fea0eee425140b70ff

  • SHA256

    4aec93b2e437151c2d618a9dddb37957a27529b6b3577bccd41ee057beac8d67

  • SHA512

    cc08357d1bb621ec3bcb1f7d0055dd52c477f70327377f0aec9767281318a0c6c37294d15f7d59ab3cbe39fd589d9a11f8ae8f3983c78d5a72f2af634a1fa660

  • SSDEEP

    49152:2nAQqMSPTx+TSqTdX1HkQo6SAARdhnvxJM0H9PAMEcaEau3R8yAH:yDqPTxcSUDk36SAEdhvxWa9P593R8yA

Malware Config

Targets

    • Target

      2024-07-01_75b350c8f7e67883d1ba9d71198cef1b_wannacry

    • Size

      5.0MB

    • MD5

      75b350c8f7e67883d1ba9d71198cef1b

    • SHA1

      833a369367059b5ae28542fea0eee425140b70ff

    • SHA256

      4aec93b2e437151c2d618a9dddb37957a27529b6b3577bccd41ee057beac8d67

    • SHA512

      cc08357d1bb621ec3bcb1f7d0055dd52c477f70327377f0aec9767281318a0c6c37294d15f7d59ab3cbe39fd589d9a11f8ae8f3983c78d5a72f2af634a1fa660

    • SSDEEP

      49152:2nAQqMSPTx+TSqTdX1HkQo6SAARdhnvxJM0H9PAMEcaEau3R8yAH:yDqPTxcSUDk36SAEdhvxWa9P593R8yA

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (626) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Tasks