Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
26-12-2024 09:37
General
-
Target
2024-12-26_a4b61828e767564b3d88504d2b7f5aad_wannacry.exe
-
Size
825KB
-
MD5
a4b61828e767564b3d88504d2b7f5aad
-
SHA1
be5c7f07b0bcec6badeb06951b449c4bce94908c
-
SHA256
317bee9ee3daeddbaf10a3f97ff558be035abeb7ce990c3b68f74c2cccdae0bc
-
SHA512
41fff45265bbf147a27702fb5986a8513534bb405ba575bc70d67c4cbf37fbf36e84ae8470e46321405da3bf65e9ac11c16a9e919b115054fe47215fce977a84
-
SSDEEP
6144:w8u27dt2omFLVFLCFLiFL7aGMVFLQzFWD/:Z7dtBQE
Score
10/10
Malware Config
Signatures
-
Chaos
Ransomware family first seen in June 2021.
-
Chaos Ransomware 1 IoCs
-
Chaos family
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-12-26_a4b61828e767564b3d88504d2b7f5aad_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2024-12-26_a4b61828e767564b3d88504d2b7f5aad_wannacry.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
848KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB