General

  • Target

    2024-03-15_e54e7abb20ad74742cc4a68940845fc0_wannacry

  • Size

    992KB

  • MD5

    e54e7abb20ad74742cc4a68940845fc0

  • SHA1

    705ebc534ea48fe9d831ae305739e1daa936c4ae

  • SHA256

    2c7b68973889404697556dc7de7db44001a46406f9855620d10dbd52f77c21a3

  • SHA512

    eb01b0ce04d94339ad6f7a807bd5769e979fd128ac3dd0e194486ed1b17a21807f47058b5ce32e02e8f644105a8fce33988f659f41504086084bddd3617ee4bf

  • SSDEEP

    12288:RGqRsI4Xpx6R86rSjW1fMbixUpRWCfbMXodGNGSOOf6WV1Oaa+cR:pG1a11CR3bUhPcR

Score
10/10

Malware Config

Signatures

  • Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion 1 IoCs
  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-15_e54e7abb20ad74742cc4a68940845fc0_wannacry
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections