Analysis
- max time kernel
136s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
13/09/2024, 17:51
General
- Target 20240913d0706d40e65e2dc6452c2279a4ab882cwannacry.exe
- Size 434KB
- Sample240913-we8vaszhpg
- SHA256 d174cf908b7bcee10cc0458955554e5ba81beffd8544ae95a427fff643a41c86
Score
10/10
Malware Config
Signatures
- Chaos
Ransomware family first seen in June 2021.
- Chaos Ransomware 1 IoCs
- Suspicious behavior: EnumeratesProcesses 26 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\20240913d0706d40e65e2dc6452c2279a4ab882cwannacry.exe"C:\Users\Admin\AppData\Local\Temp\20240913d0706d40e65e2dc6452c2279a4ab882cwannacry.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4452,i,15336851255456239337,16379811035920490645,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4744-0-0x00007FF891C13000-0x00007FF891C15000-memory.dmp
memory/4744-1-0x0000000000940000-0x00000000009B2000-memory.dmp
memory/4744-2-0x00007FF891C10000-0x00007FF8926D1000-memory.dmp
memory/4744-3-0x00007FF891C10000-0x00007FF8926D1000-memory.dmp
memory/4744-4-0x00007FF891C10000-0x00007FF8926D1000-memory.dmp