Overview

overview

10

Static

static

3

2024-07-04...ry.exe

windows7-x64

10

2024-07-04...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-04_b96d96addb4a9c9e3a655a962ef30232_wannacry

  • Size

    5.0MB

  • Sample

    240704-pz4bzsyhkc

  • MD5

    b96d96addb4a9c9e3a655a962ef30232

  • SHA1

    7eafe7ecd5ea882bf3d98498a54ae613242c6fca

  • SHA256

    9c9b598510b57c3b26563b19478414b3ca3e0ad8979f4cd03be9eb85777bf20a

  • SHA512

    712890b8d8e9cf96c9b2bd64f42fab1f79cdaf947e76519a81be0ef495fd9188dfcf1615d780f156e6b56483b3c9433a700e68a299f4a9e02bb994aba6527a13

  • SSDEEP

    49152:2nAQqMSPbcBVQej/N6SAARdhnvxJM0H9PAMEcaEau37:yDqPoBhzN6SAEdhvxWa9P5937

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-07-04_b96d96addb4a9c9e3a655a962ef30232_wannacry

    • Size

      5.0MB

    • MD5

      b96d96addb4a9c9e3a655a962ef30232

    • SHA1

      7eafe7ecd5ea882bf3d98498a54ae613242c6fca

    • SHA256

      9c9b598510b57c3b26563b19478414b3ca3e0ad8979f4cd03be9eb85777bf20a

    • SHA512

      712890b8d8e9cf96c9b2bd64f42fab1f79cdaf947e76519a81be0ef495fd9188dfcf1615d780f156e6b56483b3c9433a700e68a299f4a9e02bb994aba6527a13

    • SSDEEP

      49152:2nAQqMSPbcBVQej/N6SAARdhnvxJM0H9PAMEcaEau37:yDqPoBhzN6SAEdhvxWa9P5937

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3318) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks