wannacry | 45a8d8ad3fa19e26024835ca5a95902a4107472bace4fda72680f36e439b05d1 | Triage

Submit
Reports

Overview

overview

Static

static

8

45a8d8ad3f...d1.exe

windows7_x64

45a8d8ad3f...d1.exe

windows10-2004_x64

Sharing

General

Target

45a8d8ad3fa19e26024835ca5a95902a4107472bace4fda72680f36e439b05d1
Size

289KB
Sample

220625-fza6rshgg5
MD5

7f142f5e800096af5de5160ba5caa91e
SHA1

6d5e1375311720b3f883d14e4e59cc251e8bb299
SHA256

45a8d8ad3fa19e26024835ca5a95902a4107472bace4fda72680f36e439b05d1
SHA512

8be8d194267714433ff05d3981238963fbaf408fbc3d2473ca911573a235092fb8ec18e01fef618c7d61cd62dc82abe0ea04f40b2994e37bf81869828fbc5537

Score

10^/10

wannacry evasion ransomware upx worm

Static task

static1

Behavioral task

behavioral1

Sample

45a8d8ad3fa19e26024835ca5a95902a4107472bace4fda72680f36e439b05d1.exe

Resource

win7-20220414-en

wannacry evasion ransomware upx worm

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

45a8d8ad3fa19e26024835ca5a95902a4107472bace4fda72680f36e439b05d1.exe

Resource

win10v2004-20220414-en

wannacry evasion ransomware upx worm

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  45a8d8ad3fa19e26024835ca5a95902a4107472bace4fda72680f36e439b05d1
- Size
  
  289KB
- MD5
  
  7f142f5e800096af5de5160ba5caa91e
- SHA1
  
  6d5e1375311720b3f883d14e4e59cc251e8bb299
- SHA256
  
  45a8d8ad3fa19e26024835ca5a95902a4107472bace4fda72680f36e439b05d1
- SHA512
  
  8be8d194267714433ff05d3981238963fbaf408fbc3d2473ca911573a235092fb8ec18e01fef618c7d61cd62dc82abe0ea04f40b2994e37bf81869828fbc5537
Score

10^/10

wannacry evasion ransomware upx worm
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

wannacryevasionransomwareupxworm

behavioral2

wannacryevasionransomwareupxworm

© 2018-2024

Terms | Privacy