Analysis
-
max time kernel
136s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
13-09-2024 17:51
General
-
Target
20240913d0706d40e65e2dc6452c2279a4ab882cwannacry.exe
-
Size
434KB
-
MD5
d0706d40e65e2dc6452c2279a4ab882c
-
SHA1
ec2d49b0e6245620b05bfc4a6814e5b6d1f8f258
-
SHA256
d174cf908b7bcee10cc0458955554e5ba81beffd8544ae95a427fff643a41c86
-
SHA512
0a1aaf286fa3b0b9b8a690f902e8a8f6d5bad3c0a8b0c8f196e73a2307ea73d5222056528118a7e8d16f090d3eaa2f3bfb3be12732c0179e578ee9d23899e1a1
-
SSDEEP
3072:2k+C/0V9FhMTAnhzEyRY35Zt1orFIwi2YcRVm16Pn630H7GMgXuD//bFLAkCN:2KOSTApzIwiWm16WaGMVFLQ
Score
10/10
Malware Config
Signatures
-
Chaos
Ransomware family first seen in June 2021.
-
Chaos Ransomware 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 26 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\20240913d0706d40e65e2dc6452c2279a4ab882cwannacry.exe"C:\Users\Admin\AppData\Local\Temp\20240913d0706d40e65e2dc6452c2279a4ab882cwannacry.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4452,i,15336851255456239337,16379811035920490645,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
456KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB