Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

WannaCry Ransomware Activity

Yamato Security Hayabusa@YamatoSecurityHayabusa

•updated Jun 24, 2025•0•11

Detects WannaCry ransomware activity

Sigma

Tags

TA0008 - Lateral Movement T1210 - Exploitation of Remote Services TA0007 - Discovery T1083 - File and Directory Discovery TA0005 - Defense Evasion T1222.001 - Windows File and Directory Permissions Modification TA0040 - Impact T1486 - Data Encrypted for Impact T1490 - Inhibit System Recovery Process Creation Windowsattack.lateral-movementattack.t1210attack.discoveryattack.t1083attack.defense-evasionattack.t1222.001attack.impactattack.t1486attack.t1490detection.emerging-threatssysmon

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?