Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2024 04:59

General

  • Target

    2024-10-12_afcc53f8c29a291cac43e2924bf1832d_wannacry.exe

  • Size

    2.2MB

  • MD5

    afcc53f8c29a291cac43e2924bf1832d

  • SHA1

    5ae2b7d1aa85b932334630d63a0e798c11d77b9b

  • SHA256

    5e93b96069919d819dd95a5e78e172e667b812c0139308efbed82a9389c04288

  • SHA512

    c753ffb60ba7973015775e2e03d89fb87c6d5bff461d23849b5c3532490c89525db8472cf8602c5b64d3fad692fb42487ff415667cbe11312e709c279f3c58f4

  • SSDEEP

    49152:3nGMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvn:3GPoBhz1aRxcSUDk36SAEdhvn

Malware Config

Signatures

  • Wannacry

    WannaCry is a ransomware cryptoworm.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-10-12_afcc53f8c29a291cac43e2924bf1832d_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-10-12_afcc53f8c29a291cac43e2924bf1832d_wannacry.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads