My favorite so far was the Monero mining malware which actually patched victims' computers protecting them from future wannacry-like attacks! :D

https://themerkle.com/monero-mining-malware-prevented-wannacry-from-infecting-even-more-computers/