General
-
Target
eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414
-
Size
3.5MB
-
Sample
240414-kp2m7afb97
-
MD5
087f42dd5c17b7c42723dfc150a8da42
-
SHA1
013010ff0e5c25c48b2a4e7ed1340738a0dd8995
-
SHA256
eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414
-
SHA512
0c01500ddb57bafc84c33dbbc9b2d6f16b945acd5533ea0484017291794d2d4b069f5eae14b3bb412f95849e4ab960d9685b05cb657f5c81076c9daa65d74203
-
SSDEEP
98304:QqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3xt:QqPe1Cxcxk3ZAEUadzR8yc4ght
Static task
static1
Behavioral task
behavioral1
Sample
eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe
Resource
win10-20240319-en
Behavioral task
behavioral3
Sample
eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral4
Sample
eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe
Resource
win11-20240412-en
Malware Config
Extracted
C:\Users\Admin\Documents\@[email protected]
wannacry
13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94
Extracted
C:\Users\Admin\AppData\Local\Temp\@[email protected]
wannacry
12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw
Extracted
C:\Users\Admin\AppData\Local\Temp\@[email protected]
wannacry
115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn
Targets
-
-
Target
eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414
-
Size
3.5MB
-
MD5
087f42dd5c17b7c42723dfc150a8da42
-
SHA1
013010ff0e5c25c48b2a4e7ed1340738a0dd8995
-
SHA256
eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414
-
SHA512
0c01500ddb57bafc84c33dbbc9b2d6f16b945acd5533ea0484017291794d2d4b069f5eae14b3bb412f95849e4ab960d9685b05cb657f5c81076c9daa65d74203
-
SSDEEP
98304:QqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3xt:QqPe1Cxcxk3ZAEUadzR8yc4ght
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Adds Run key to start application
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1