General
-
Target
2025-01-02_c00bf083f050fb5d35b97bceb47f242e_wannacry_wapomi
-
Size
3.6MB
-
Sample
250102-2b1x6sxrcx
-
MD5
c00bf083f050fb5d35b97bceb47f242e
-
SHA1
4685e6d474c6576ea40514ab922514319031fb5c
-
SHA256
55674c75630907c55ad91d1d1b85eaec7afabf8125c77057986da85eeb04083f
-
SHA512
9911c5084c3872707f77be315d9a011c01645ad90d7b8061c869f165ef727a6573c798c958934c833214ae6618468c06552224da882042e218d6e3b1abc71f38
-
SSDEEP
98304:iDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:iDqPe1Cxcxk3ZAEUadzR8yc4H
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-02_c00bf083f050fb5d35b97bceb47f242e_wannacry_wapomi.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-01-02_c00bf083f050fb5d35b97bceb47f242e_wannacry_wapomi
-
Size
3.6MB
-
MD5
c00bf083f050fb5d35b97bceb47f242e
-
SHA1
4685e6d474c6576ea40514ab922514319031fb5c
-
SHA256
55674c75630907c55ad91d1d1b85eaec7afabf8125c77057986da85eeb04083f
-
SHA512
9911c5084c3872707f77be315d9a011c01645ad90d7b8061c869f165ef727a6573c798c958934c833214ae6618468c06552224da882042e218d6e3b1abc71f38
-
SSDEEP
98304:iDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:iDqPe1Cxcxk3ZAEUadzR8yc4H
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Modifies firewall policy service
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-