Overview

overview

10

Static

static

10

2024-07-29...ry.exe

windows7-x64

10

2024-07-29...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-29_4113cebcc1df0d84e48ab602def45d10_destroyer_wannacry

  • Size

    25KB

  • Sample

    240729-h64srssepc

  • MD5

    4113cebcc1df0d84e48ab602def45d10

  • SHA1

    698306aa603646ac73e5e12bc20bc0409d5c3161

  • SHA256

    016af5cbbd12a5ef4c62160c0f159ba68b7347e46593653debfc0dc4404ae9d7

  • SHA512

    171c3f822b0bcd071c4ce1ad0b87240652c3e270c898b29f259294e0ae81300a9a4d680a4e965f36a537a270e2c3199b8c86ab972b1015542b07106213e7e437

  • SSDEEP

    384:sYenjLLATPYpjzjrsh0ABm7IiOVp91HmSKXPxDGJ:rzYZHL1c9vexDG

Score
10/10
chaosransomwarespywarestealer

Malware Config

Targets

    • Target

      2024-07-29_4113cebcc1df0d84e48ab602def45d10_destroyer_wannacry

    • Size

      25KB

    • MD5

      4113cebcc1df0d84e48ab602def45d10

    • SHA1

      698306aa603646ac73e5e12bc20bc0409d5c3161

    • SHA256

      016af5cbbd12a5ef4c62160c0f159ba68b7347e46593653debfc0dc4404ae9d7

    • SHA512

      171c3f822b0bcd071c4ce1ad0b87240652c3e270c898b29f259294e0ae81300a9a4d680a4e965f36a537a270e2c3199b8c86ab972b1015542b07106213e7e437

    • SSDEEP

      384:sYenjLLATPYpjzjrsh0ABm7IiOVp91HmSKXPxDGJ:rzYZHL1c9vexDG

    Score
    10/10
    chaosransomwarespywarestealer

    • Chaos

      Ransomware family first seen in June 2021.

      ransomwarechaos

    • Chaos Ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks