Analysis
-
max time kernel
361s -
max time network
362s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
05-12-2024 03:04
General
-
Target
Ransomware.WannaCry.zip
-
Size
317KB
-
MD5
df1ff8c74159aeb4ef57346b50ceef0d
-
SHA1
033501ccbd89ecff8f796b8b34e9666deabc3189
-
SHA256
62cc18705a6a603b4ba3d5b108b8f2c286384a624e2285e3b8b7f1de7a64d8f0
-
SHA512
a0bdd5a872d1bae0aa875b9aa88bd7b186425ff2fe00cbcf1c04d01a14e898232ac194398516841cc59cc40168748075bfe6cb7bedbbd45eaf54b99c10fb7425
-
SSDEEP
6144:1LSss1pOL/saqkPV9FemB9YWDSsmwu9AvZJT3CqbMrhryf65NRPaCieMjAkvCJv+:1mss1pOL/saqkPV9FemB9YWDSsmwu9AN
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Ransomware.WannaCry.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow