Overview

overview

10

Static

static

10

2024-08-22...ry.exe

windows7-x64

10

2024-08-22...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-22_1dc0db4651651bf3729eb659557dad1a_wannacry

  • Size

    242KB

  • Sample

    240822-w1pnjs1dja

  • MD5

    1dc0db4651651bf3729eb659557dad1a

  • SHA1

    d1d6132278b81fd6f5b89647aa229552afc5b074

  • SHA256

    79cc769744baf78a6d4524b3de7b25e3935c8d2009beea1e4b8c7b73a0eb19ab

  • SHA512

    ed220ceb77fbea9ecab9642a122c2dc34ccfd95642e55e9768e28983a0c68252251a5e36c6720c4055bd09818a5b0ca4911be7ac8c6338f56639597e8237f73a

  • SSDEEP

    6144:CDpWZJJchBRsZVtZc9eZBp1EvtxFzASUEEa2Xs3T:CVk2bELZBp1EvBzNUEEa2Xs3

Score
10/10
chaosevasionransomware

Malware Config

Targets

    • Target

      2024-08-22_1dc0db4651651bf3729eb659557dad1a_wannacry

    • Size

      242KB

    • MD5

      1dc0db4651651bf3729eb659557dad1a

    • SHA1

      d1d6132278b81fd6f5b89647aa229552afc5b074

    • SHA256

      79cc769744baf78a6d4524b3de7b25e3935c8d2009beea1e4b8c7b73a0eb19ab

    • SHA512

      ed220ceb77fbea9ecab9642a122c2dc34ccfd95642e55e9768e28983a0c68252251a5e36c6720c4055bd09818a5b0ca4911be7ac8c6338f56639597e8237f73a

    • SSDEEP

      6144:CDpWZJJchBRsZVtZc9eZBp1EvtxFzASUEEa2Xs3T:CVk2bELZBp1EvBzNUEEa2Xs3

    Score
    10/10
    chaosevasionransomware

    • Chaos

      Ransomware family first seen in June 2021.

      ransomwarechaos

    • Chaos Ransomware

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Looks for VMWare Tools registry key

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks