General

  • Target

    2024-08-17_518177458b8b14e366b8f0cd7877d167_wannacry

  • Size

    477KB

  • Sample

    240817-hnarzawbqq

  • MD5

    518177458b8b14e366b8f0cd7877d167

  • SHA1

    2257cac50a7e658cb334c01458d8f039ce837ca0

  • SHA256

    69f8a9fe833a4e2da62d8112f07001d26286a3aca3a59c7a2174581eb99db735

  • SHA512

    5981dce9a119ee96ecb77894cc4509766f1e486d1c02f688fccd07eed0d67b2e96bc82f1adadf9087555ae431dcc0ab5e8b492d5dc8caf962086d9ec2114d03b

  • SSDEEP

    12288:SL4mKpjv4kjqy+Xr1x/chx5n+rhqbrB8cEfN7Kwp:S467Dm6cE

Malware Config

Targets

    • Target

      2024-08-17_518177458b8b14e366b8f0cd7877d167_wannacry

    • Size

      477KB

    • MD5

      518177458b8b14e366b8f0cd7877d167

    • SHA1

      2257cac50a7e658cb334c01458d8f039ce837ca0

    • SHA256

      69f8a9fe833a4e2da62d8112f07001d26286a3aca3a59c7a2174581eb99db735

    • SHA512

      5981dce9a119ee96ecb77894cc4509766f1e486d1c02f688fccd07eed0d67b2e96bc82f1adadf9087555ae431dcc0ab5e8b492d5dc8caf962086d9ec2114d03b

    • SSDEEP

      12288:SL4mKpjv4kjqy+Xr1x/chx5n+rhqbrB8cEfN7Kwp:S467Dm6cE

    • Chaos

      Ransomware family first seen in June 2021.

    • Chaos Ransomware

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops desktop.ini file(s)

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks