e66822e9eedfcafdb23e7450709d984993ab2c91e1ed331fbe2a1b64817ed6c4

Target
ransomware.zip
Size 7.5MB
Sample261020-jabb1sw1bs
SHA256 e66822e9eedfcafdb23e7450709d984993ab2c91e1ed331fbe2a1b64817ed6c4
MD5 de45fef8080245e845e4c2fd0ae165d6
SHA1 8ee05b2919e7677315b79262e387f81acb658507
SHA512 fddad854708f547a0fe9f5b774d5c8d73b5bb109caf689efc68ea7606d4be9ea27c8f50fbeb24c3439c29b19b0c078dcac862047efeaac5c4d3a3067afa0e6cf
SSDEEP 196608:xavdgBNNoYvhfWqTEDm5jl/eNgCtN1Qg2ntjdlenBGEZdrK6:xSdgBNpfNwDmpFeNgCnN2RdeBGC
TLSH
T16786331ACB94DD3BDE1E44B466027EF91C9ECE1FDE893046B4395705EFAE0638490B1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ransomware/WanaDecrypt0r.exe
- Size 7.7MB
- SHA256 37747ef98d4574a4fb8b87039526f4e6f6ff6e0c654eb9dcf13833e7e27a6149
- MD5 80ae91891bdb20fc9ffbc35af0e1352b
- SHA1 2c4606168d8491f3d6ad17f5e2cc4eba28dbd638
- SHA512 4c34d95fd6b3fde9781c1be1e8cb3a8fc94d920844e8c79a74d54b33b62374129983fbc1c2e4e5b6e21d301a0bea039a6d165f248ebcb9d60389d4d6b2fe9d25
- SSDEEP 196608:2r2eYdDAXurHSuhHToAUPNfGU5vXvE4LDdIOZ+:2KdEXuXhHTodRGkXs4/PA
- TLSH
  T189863365A3C599F9FEB3E93C96630245D3B63C061720C5DB02D986527E376F02A3A372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution ransomware
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Loads dropped DLL
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

Loads dropped DLL

Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2