wannacry | 67494cff2b5ab267f7f2eff7d076058659719f5d461604a937b8ee71af91b4e0 | Triage

Submit
Reports

Overview

overview

Static

static

3

2024070436...ry.exe

windows7-x64

2024070436...ry.exe

windows10-2004-x64

Sharing

General

Target

20240704363354b3bcea8da7fad211c7032c413awannacry
Size

5.0MB
Sample

240704-r3hwkaxhnm
MD5

363354b3bcea8da7fad211c7032c413a
SHA1

084c6b0ae02cb2e578f206aa9f7cb2dd4627eaf0
SHA256

67494cff2b5ab267f7f2eff7d076058659719f5d461604a937b8ee71af91b4e0
SHA512

b02ab8824fc99817bc933e8140abf315adb32dae80b86ba24cc40e281cfae5a11b6fd64b7334b32234adfed84de3b9310caf617eb3ed399f508e0001c38efb0b
SSDEEP

49152:QnnMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAJ:QnPoBhz1aRxcSUDk36SAE

Score

10^/10

wannacry discovery ransomware worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

20240704363354b3bcea8da7fad211c7032c413awannacry.exe

Resource

win7-20240508-en

wannacry discovery ransomware worm

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

20240704363354b3bcea8da7fad211c7032c413awannacry.exe

Resource

win10v2004-20240508-en

wannacry discovery ransomware worm

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  20240704363354b3bcea8da7fad211c7032c413awannacry
- Size
  
  5.0MB
- MD5
  
  363354b3bcea8da7fad211c7032c413a
- SHA1
  
  084c6b0ae02cb2e578f206aa9f7cb2dd4627eaf0
- SHA256
  
  67494cff2b5ab267f7f2eff7d076058659719f5d461604a937b8ee71af91b4e0
- SHA512
  
  b02ab8824fc99817bc933e8140abf315adb32dae80b86ba24cc40e281cfae5a11b6fd64b7334b32234adfed84de3b9310caf617eb3ed399f508e0001c38efb0b
- SSDEEP
  
  49152:QnnMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAJ:QnPoBhz1aRxcSUDk36SAE
Score

10^/10

wannacry discovery ransomware worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Contacts a large (3142) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

wannacrydiscoveryransomwareworm

behavioral2

wannacrydiscoveryransomwareworm

© 2018-2024

Terms | Privacy