07ecdced8cf2436c0bc886ee1e49ee4b8880a228aa173220103f35c535305635

Analysis

max time kernel
496s
max time network
506s
platform
windows10-1703_x64
resource
win10-20240221-en
resource tags

arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
submitted
11-03-2024 16:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

WannaCry-main/.github/FUNDING.yml
Size

879B
MD5

148a8212d916df277b94ff7293ebaf93
SHA1

6017fb2ca1094abbab2e4b7493906334a98afdf2
SHA256

a718485e8f9d87fe04684f8e8e295e4e2f1c686691d467adfc10f83a0d277dc0
SHA512

4e4ebf456ef5d41c72cab28082b89134ff4393bfd439fd4f22607b08ae4b06588a2832f1d2bfb69404903ebd05c5f2ac1171a2e66c9f697d777c941b6d243400

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-1104443672-3570440473-4052989528-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1104443672-3570440473-4052989528-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

2720 OpenWith.exe

pid	process
2720	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\WannaCry-main\.github\FUNDING.yml
1⤵
- Modifies registry class
PID:1444

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads