General

  • Target

    2024-02-20_82e9d7ead2705f060c47d00f6095f968_wannacry

  • Size

    210KB

  • MD5

    82e9d7ead2705f060c47d00f6095f968

  • SHA1

    7bfc8ac899c98c28918545a0b4b6063fa8ff06e8

  • SHA256

    a2837287e1dd493f83ad6a175ecb41fe7c3bbae96f1976e704ad5503ec4319a8

  • SHA512

    5983a54772b44b1ed661ad165334583f8330f217d23bfcf5b505d8a79a7fc955da856a21af63560f44f6ac53d59e7e7cc8a109b3c2bc6e1a83a27ae8ade18c4c

  • SSDEEP

    3072:OJ4BKv1Et9jDWHoC97M26+MZjQQbKGUE3T9Mg5hw0GlVdopP:LK6t9jDWHH7+jUGULsWVq

Score
10/10

Malware Config

Signatures

  • Chaos Ransomware 1 IoCs
  • Chaos family
  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables packed with ConfuserEx Mod 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-20_82e9d7ead2705f060c47d00f6095f968_wannacry
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections