General

  • Target

    00bc02b91a3850390e977e4b75f1f84f

  • Size

    5.0MB

  • Sample

    210119-t5bwdvfgps

  • MD5

    00bc02b91a3850390e977e4b75f1f84f

  • SHA1

    73240c616134f1830a0ab8dd565284d92e238333

  • SHA256

    88489f32a5e8521eb18fc390aac403c729fccb579e5b23307ca487ec7c724ce1

  • SHA512

    7baaf5578589f6881334868c1c7a4739a7e2294cef4967f10db20d9280dff2379b0977c6bec9d7c57b50df0e064a71d9df7be39ce48605a5c32b868e927667a5

Malware Config

Targets

    • Target

      00bc02b91a3850390e977e4b75f1f84f

    • Size

      5.0MB

    • MD5

      00bc02b91a3850390e977e4b75f1f84f

    • SHA1

      73240c616134f1830a0ab8dd565284d92e238333

    • SHA256

      88489f32a5e8521eb18fc390aac403c729fccb579e5b23307ca487ec7c724ce1

    • SHA512

      7baaf5578589f6881334868c1c7a4739a7e2294cef4967f10db20d9280dff2379b0977c6bec9d7c57b50df0e064a71d9df7be39ce48605a5c32b868e927667a5

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks