Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
26-08-2024 00:39
General
-
Target
2024-08-26_a4402841f422053583d3b0a2fe1cf92d_wannacry.exe
-
Size
104KB
-
MD5
a4402841f422053583d3b0a2fe1cf92d
-
SHA1
84b9e682dfdc66af8a43fb623669df368ff9163a
-
SHA256
df2eae667d4390d573c01a3b0b9f33f19fd91696f99bfa11c9d7753a61222e89
-
SHA512
4c6ca50d9e740c4ca5865117eaf5cc67fe87fb7aba9d4a9580e8a3e9e684a713cb94da2fbbf45e749cbd6a3a49ad273a001f3adac5080fc61c4ee43ad1cb01dc
-
SSDEEP
1536:lNmpJZngzZ8+1oqDAYkjeNY+RchBuwl/lrY0/x4GWB+Zi++VICdjc9Oo7/I:q3ngZFbJchBuihsZV3jc9d7/I
Malware Config
Signatures
-
Chaos
Ransomware family first seen in June 2021.
-
Chaos Ransomware 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-26_a4402841f422053583d3b0a2fe1cf92d_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-26_a4402841f422053583d3b0a2fe1cf92d_wannacry.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39KB
MD5d80d1b6d9a6d5986fa47f6f8487030e1
SHA18f5773bf9eca43b079c1766b2e9f44cc90bd9215
SHA256446128f1712da8064d0197376184315cb529ed26ed9122f7b171bb208e22c0c3
SHA5129fcf0105c2c9ee81c526d41633d93579bb8e2837989d77fb4a6523440415ec2d7fa46ac9ae4e55ecebd99126837817ac308cc079475de02667b21727a43d74cc
-
Filesize
4KB
-
Filesize
128KB
-
Filesize
48KB
-
Filesize
9.9MB
-
Filesize
9.9MB