Overview

overview

10

Static

static

10

2024-12-31...ry.exe

windows7-x64

10

2024-12-31...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-31_982205e6e14967f94ae81e43e212a269_wannacry

  • Size

    198KB

  • Sample

    241231-l4p4daxpfm

  • MD5

    982205e6e14967f94ae81e43e212a269

  • SHA1

    430cbbe633775c0615e25cbff99bcc8cd8bc9f9c

  • SHA256

    e4afe033561fe5bc752c5df8698c103ad815b61162aabe66c2d1c4df179662a6

  • SHA512

    634c8284743a0efc992ab130df7129ff7549f09cb92935c86b0af481dfbdc47df0e627d3c530a0491428700d0dc92723651223517b4732b8b08930cf4535aa7b

  • SSDEEP

    3072:doojKRmr9PZS/+Xrl1VrHQW6CURgeXd0z7bLvgQMFLesUDjzCKCMlA4tIrZJVrSW:Nr9PLTQDNYr5XO6A4tIrRSc1

Score
10/10
chaosransomwarespywarestealer

Malware Config

Targets

    • Target

      2024-12-31_982205e6e14967f94ae81e43e212a269_wannacry

    • Size

      198KB

    • MD5

      982205e6e14967f94ae81e43e212a269

    • SHA1

      430cbbe633775c0615e25cbff99bcc8cd8bc9f9c

    • SHA256

      e4afe033561fe5bc752c5df8698c103ad815b61162aabe66c2d1c4df179662a6

    • SHA512

      634c8284743a0efc992ab130df7129ff7549f09cb92935c86b0af481dfbdc47df0e627d3c530a0491428700d0dc92723651223517b4732b8b08930cf4535aa7b

    • SSDEEP

      3072:doojKRmr9PZS/+Xrl1VrHQW6CURgeXd0z7bLvgQMFLesUDjzCKCMlA4tIrZJVrSW:Nr9PLTQDNYr5XO6A4tIrRSc1

    Score
    10/10
    chaosransomwarespywarestealer

    • Chaos

      Ransomware family first seen in June 2021.

      ransomwarechaos

    • Chaos Ransomware

    • Chaos family

      chaos

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks