Analysis
-
max time kernel
181s -
max time network
204s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-08-2024 00:56
General
-
Target
WannaCry.exe
-
Size
2.9MB
-
MD5
db80f5f849c902b146afa7c375a4b2a5
-
SHA1
5b8844efb368ded70b991178350c91dddd28e448
-
SHA256
6c8af938c7796eb36c829b0d600117f2e99065e660a7c2936a7a5387c7488a8d
-
SHA512
65d928ee71e88ca420748069b2607fe4b30b0fb33cbb13b6e517facf0966b218fd7c3168653c558ed150411ad1cac54bd3b25bf11bb86b11c0d43c5a9dcc9eab
-
SSDEEP
6144:mL5/jhHGXR/BsheZM5wnH2m9pD6UgmryJOk55ndwz7AYjK8RTI5JN4jnpK:mL5/0XHsheSAH2GD3uOAwP5ZI5z4jpK
Score
10/10
Malware Config
Signatures
-
Wannacry
WannaCry is a ransomware cryptoworm.
-
Sets desktop wallpaper using registry 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WannaCry.exe"C:\Users\Admin\AppData\Local\Temp\WannaCry.exe"1⤵
- Sets desktop wallpaper using registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
3.0MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB