Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13-09-2024 06:05
General
-
Target
2024-09-13_d0706d40e65e2dc6452c2279a4ab882c_wannacry.exe
-
Size
434KB
-
MD5
d0706d40e65e2dc6452c2279a4ab882c
-
SHA1
ec2d49b0e6245620b05bfc4a6814e5b6d1f8f258
-
SHA256
d174cf908b7bcee10cc0458955554e5ba81beffd8544ae95a427fff643a41c86
-
SHA512
0a1aaf286fa3b0b9b8a690f902e8a8f6d5bad3c0a8b0c8f196e73a2307ea73d5222056528118a7e8d16f090d3eaa2f3bfb3be12732c0179e578ee9d23899e1a1
-
SSDEEP
3072:2k+C/0V9FhMTAnhzEyRY35Zt1orFIwi2YcRVm16Pn630H7GMgXuD//bFLAkCN:2KOSTApzIwiWm16WaGMVFLQ
Score
10/10
Malware Config
Signatures
-
Chaos
Ransomware family first seen in June 2021.
-
Chaos Ransomware 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-13_d0706d40e65e2dc6452c2279a4ab882c_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-13_d0706d40e65e2dc6452c2279a4ab882c_wannacry.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
456KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB