Zero-Dwell Threat Intelligence Reports

WannaCry Payload Masquerading As Tasksche Executable For Stealth.exe

WannaCry Payload Masquerading As Diskpart Executable For Stealth.exe

payload

Advanced Ransomware Performing WMI And BIOS Environment Checks.exe

long-sleeps detect-debug-environment calls-wmi checks-bios

WannaCry Ransomware Worm Embedding Massive ZIP Resource Payload.exe

payload

WannaCry Payload Exhibiting Classic Worm Propagation And Encryption.exe

payload

Virut-Infected WannaCry Worm Triggering Killswitch DNS Lookup Behavior.exe

long-sleeps spreader malware exploit checks-disk-space cve-2017-0147

WannaCry Ransomware Worm Triggering Killswitch DNS Lookup Behavior.exe

long-sleeps detect-debug-environment malware exploit service-scan cve-2017-0147

Large WannaCry Variant Triggering Extensive Multi-Engine Detections.exe

payload exploit cve-2017-0147

WannaCry Ransomware Payload Embedding ZIP-Packed Resource Section Data.exe

payload

Massive Packed Executable Exhibiting Strong Anti-Debug And Evasion Behavior.exe

overlay detect-debug-environment

Ransomware Payload Embedding Massive ZIP Resource For Execution.exe

payload

Ransomware Payload Embedding Massive Resource Data For Execution.exe

payload exploit cve-2017-0147