Zero-Dwell Threat Intelligence Reports

WannaCryptor Sample Exhibiting EternalBlue-Style Network Propagation.exe

payload

WannaCry Ransomware Variant Packed With Embedded ZIP Resource Payload.exe

WannaCry Variant Triggering Massive Multi-Engine Ransomware Signatures.exe

payload exploit cve-2017-0147

WannaCry Ransomware Worm Leveraging CVE-2017-0147 For Propagation.exe

payload exploit cve-2017-0147

WannaCry Loader Masquerading As Tasksche Executable For Persistence.exe

overlay corrupt

VS98-Compiled WannaCryptor Payload Showing Classic Worm Behavior.exe

payload exploit cve-2017-0147

WannaCry Ransomware Worm Compiled With Legacy Visual Studio Toolchain.exe

payload

UPX-Packed Malware Masquerading As Core Windows System Processes.exe

calls-wmi checks-user-input executes-dropped-file persistence upx

WannaCryptor Payload Masquerading As Tasksche Executable For Persistence.exe

WannaCry–Expiro Hybrid Executable Triggering Killswitch Domain Lookups.exe

long-sleeps detect-debug-environment malware exploit cve-2017-0147

WannaCryptor Payload Built With Legacy Visual Studio Six Toolchain.exe

overlay detect-debug-environment

WannaCry Ransomware Variant Compiled With VS2008 Toolchain.exe

overlay corrupt