Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2024 04:59
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-12_afcc53f8c29a291cac43e2924bf1832d_wannacry.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2024-10-12_afcc53f8c29a291cac43e2924bf1832d_wannacry.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-12_afcc53f8c29a291cac43e2924bf1832d_wannacry.exe
-
Size
2.2MB
-
MD5
afcc53f8c29a291cac43e2924bf1832d
-
SHA1
5ae2b7d1aa85b932334630d63a0e798c11d77b9b
-
SHA256
5e93b96069919d819dd95a5e78e172e667b812c0139308efbed82a9389c04288
-
SHA512
c753ffb60ba7973015775e2e03d89fb87c6d5bff461d23849b5c3532490c89525db8472cf8602c5b64d3fad692fb42487ff415667cbe11312e709c279f3c58f4
-
SSDEEP
49152:3nGMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvn:3GPoBhz1aRxcSUDk36SAEdhvn
Malware Config
Signatures
-
Wannacry
WannaCry is a ransomware cryptoworm.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-10-12_afcc53f8c29a291cac43e2924bf1832d_wannacry.exe