a80032c76c5b96b652ad059098578b5afa4539c665650f2ae073b76657e889e0

Resubmissions

16/03/2025, 11:14

250316-nb82wsspy4 3

16/03/2025, 10:39

250316-mp3xcssks8 10

16/03/2025, 10:38

250316-mpmkdasks3 10

Analysis

max time kernel
101s
max time network
104s
platform
windows11-21h2_x64
resource
win11-20250313-en
resource tags

arch:x64arch:x86image:win11-20250313-enlocale:en-usos:windows11-21h2-x64system
submitted
16/03/2025, 10:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

WannaCry2.0-main/.vscode/c_cpp_properties.json
Size

303B
MD5

e457639b6442de3a6b199e0bcf48ca61
SHA1

925fbb2a12c11dc8a5cb139ed9f7148bb342c5e7
SHA256

fdcb102f4856235745e6f824410eb411ca58681485420bd1eacb6d8f4f1b7304
SHA512

2ae1460488f1046c964c2c30ff0dacc554ea1de3c53fabbdf0a7b892ecef532df2af6f1f9a97a373a7da521d87148fd0ea010ec005cfe75d0008e3b73ed477fe

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1216697136-3907990103-1733992739-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1216697136-3907990103-1733992739-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6028	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\WannaCry2.0-main\.vscode\c_cpp_properties.json
1⤵
- Modifies registry class
PID:1512

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads