2024-04-28_7f3607674f31dd96e4d6a009cb4dfb7e_wannacry

General

Target

2024-04-28_7f3607674f31dd96e4d6a009cb4dfb7e_wannacry
Size

987KB
MD5

7f3607674f31dd96e4d6a009cb4dfb7e
SHA1

5ebce6ec9924dc24e73a1faef6934128ea46c28c
SHA256

ab1ead6628df92a6cf9e0aee75bdf3ad9e7bf7e9067baf2a5a83adbf4cfd5d02
SHA512

68e0aff21d3ee5d24794c1d46f5a13fdc6af63f299ff175f74f89443b7edbcf09f7a96fdd43d64ed44e8336f37bfdc1c1806a2103846bbb2e14593fc0a125c06
SSDEEP

12288:ut3UkyTa5ziXxqf8FLpqf77yAJKrMCLSoJjvN+MyjLvBG1YJX8ORnu:TkbsLpqDuA7E3cRnu

Score

10^/10

Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_SandboxHookingDLL

Detects command variations typically used by ransomware 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_GENRansomware

Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICOUS_EXE_References_VEEAM

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-04-28_7f3607674f31dd96e4d6a009cb4dfb7e_wannacry