General
-
Target
91056a0f103ff508e788bf032c6043adf1c8b1267443377e58e1e00be8b8859b
-
Size
3.5MB
-
Sample
240417-g4rjzshd4x
-
MD5
b9a6cce789af6ca22c445d22039dd44a
-
SHA1
0d2d170ba8b7dc62612c25a60d9e7aee42c63a3d
-
SHA256
91056a0f103ff508e788bf032c6043adf1c8b1267443377e58e1e00be8b8859b
-
SHA512
9b33629230bb9ef7b58848c2ee09c24b7265618aa58461348dc49c021f40b38c3c3870f17a508bded362017d603290a4df3649fd69c8ed1b6fda4981d87c1b98
-
SSDEEP
98304:PPPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3I:PPPe1Cxcxk3ZAEUadzR8yc4g4
Static task
static1
Behavioral task
behavioral1
Sample
91056a0f103ff508e788bf032c6043adf1c8b1267443377e58e1e00be8b8859b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
91056a0f103ff508e788bf032c6043adf1c8b1267443377e58e1e00be8b8859b.exe
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
91056a0f103ff508e788bf032c6043adf1c8b1267443377e58e1e00be8b8859b.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
91056a0f103ff508e788bf032c6043adf1c8b1267443377e58e1e00be8b8859b.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
91056a0f103ff508e788bf032c6043adf1c8b1267443377e58e1e00be8b8859b.exe
Resource
win11-20240412-en
Malware Config
Extracted
C:\Users\Admin\Documents\@[email protected]
wannacry
13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94
Extracted
C:\Users\Admin\AppData\Local\Temp\@[email protected]
wannacry
12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw
Targets
-
-
Target
91056a0f103ff508e788bf032c6043adf1c8b1267443377e58e1e00be8b8859b
-
Size
3.5MB
-
MD5
b9a6cce789af6ca22c445d22039dd44a
-
SHA1
0d2d170ba8b7dc62612c25a60d9e7aee42c63a3d
-
SHA256
91056a0f103ff508e788bf032c6043adf1c8b1267443377e58e1e00be8b8859b
-
SHA512
9b33629230bb9ef7b58848c2ee09c24b7265618aa58461348dc49c021f40b38c3c3870f17a508bded362017d603290a4df3649fd69c8ed1b6fda4981d87c1b98
-
SSDEEP
98304:PPPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3I:PPPe1Cxcxk3ZAEUadzR8yc4g4
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Adds Run key to start application
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1