Overview

overview

10

Static

static

10

2025-02-02...ry.exe

windows7-x64

10

2025-02-02...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-02_8429721eb08da641d5246d819838cc2a_wannacry

  • Size

    328KB

  • Sample

    250202-lkztgaxqbr

  • MD5

    8429721eb08da641d5246d819838cc2a

  • SHA1

    1ebb9500641de2fbe3cd86f9920f8ee4d5cb4628

  • SHA256

    ddebb5a4015b57a6cc05cbbf665536377541225f525e0ed3b9af65f7a29d9214

  • SHA512

    5aa6cbae910575f3d4330d30031efea32cca79f3922fd75dd6eb87f395523ab61b50649ded9a207110ccc9d065434356d084387b7bf28f3d9e2b222a7afed70b

  • SSDEEP

    6144:I4r9CYPyPzHka7IF2UDBWe4KGgBdUhcX7elbKTu:IMPyPzEa0F2UXfBd3X3u

Score
10/10
chaosransomwarespywarestealer

Malware Config

Targets

    • Target

      2025-02-02_8429721eb08da641d5246d819838cc2a_wannacry

    • Size

      328KB

    • MD5

      8429721eb08da641d5246d819838cc2a

    • SHA1

      1ebb9500641de2fbe3cd86f9920f8ee4d5cb4628

    • SHA256

      ddebb5a4015b57a6cc05cbbf665536377541225f525e0ed3b9af65f7a29d9214

    • SHA512

      5aa6cbae910575f3d4330d30031efea32cca79f3922fd75dd6eb87f395523ab61b50649ded9a207110ccc9d065434356d084387b7bf28f3d9e2b222a7afed70b

    • SSDEEP

      6144:I4r9CYPyPzHka7IF2UDBWe4KGgBdUhcX7elbKTu:IMPyPzEa0F2UXfBd3X3u

    Score
    10/10
    chaosransomwarespywarestealer

    • Chaos

      Ransomware family first seen in June 2021.

      ransomwarechaos

    • Chaos Ransomware

    • Chaos family

      chaos

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks