Overview

overview

10

task1

 

10

task2

 

10

Resubmissions

18/10/2019, 15:52

191018-8typv9j9fn10

09/08/2019, 12:22

190809-4hmrwf3nzs10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
  • Size 3.4MB
  • Sample191018-8typv9j9fn
  • SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
    • Size 3.4MB
    • SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
    • MD5 SHA1 SHA512
    Score
    10/10

    • Wannacry file encrypt

    • wannacry family

      family

    • Deletes shadow copies

      ransomware

    • Executes dropped EXE

    • Modifies file permissions

    • Drops startup file

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run entry to start application

      persistence

    • Checks system information in the registry (likely anti-VM)

    • Drops Office document

      dropperexploitermaldoc

    • Modifies service

      persistence

    • Sets desktop wallpaper using registry

      ransomware
    task1task2

MITRE ATT&CK Enterprise v6

Tasks