Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_8b7046614ba3b894391976cc421c2b87_predator-pain_wannacry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_8b7046614ba3b894391976cc421c2b87_predator-pain_wannacry.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-16_8b7046614ba3b894391976cc421c2b87_predator-pain_wannacry
-
Size
1020KB
-
MD5
8b7046614ba3b894391976cc421c2b87
-
SHA1
be77576818cc4ea2656b5f26d45d1999ff8e9df2
-
SHA256
a258c2e14db50b2ae1db3e211aee82895fbd88adfa8d66fe42e4f1288c1df860
-
SHA512
162829ac983b05729e0abb0a6e17861a226fc65b49d906e26655e960241a6bd7f460608b64e92853fc03614c4730532b383b5ec1b3cdc38a3ffb320a172eb12c
-
SSDEEP
12288:v5CEFZayURbLLXem95xm+lI4HVBD9DMCKp2BJN/Pr:v5CE6yWPBouI4HzDdKcJZ
Malware Config
Signatures
-
Detects ransomware indicator 1 IoCs
resource yara_rule sample SUSP_RANSOMWARE_Indicator_Jul20 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-16_8b7046614ba3b894391976cc421c2b87_predator-pain_wannacry
Files
-
2024-04-16_8b7046614ba3b894391976cc421c2b87_predator-pain_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1020KB - Virtual size: 1020KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ