Zero-Dwell Threat Intelligence Reports

WannaCry Loader Masquerading As Tasksche Executable For Persistence.exe

overlay corrupt

VS98-Compiled WannaCryptor Payload Showing Classic Worm Behavior.exe

payload exploit cve-2017-0147

WannaCry Ransomware Worm Compiled With Legacy Visual Studio Toolchain.exe

payload

UPX-Packed Malware Masquerading As Core Windows System Processes.exe

calls-wmi checks-user-input executes-dropped-file persistence upx

WannaCryptor Payload Masquerading As Tasksche Executable For Persistence.exe

WannaCry–Expiro Hybrid Executable Triggering Killswitch Domain Lookups.exe

long-sleeps detect-debug-environment malware exploit cve-2017-0147

WannaCryptor Payload Built With Legacy Visual Studio Six Toolchain.exe

overlay detect-debug-environment

WannaCry Ransomware Variant Compiled With VS2008 Toolchain.exe

overlay corrupt

Malicious .NET Executable Exhibiting WannaCry-Themed Ransomware Traits.exe

overlay corrupt assembly

Hybrid LockBit Sample Showing Worm-Like Network Enumeration Behavior.exe

payload

WannaCry Payload Leveraging CVE-2017-0147 For Network Propagation.exe

payload exploit cve-2017-0147

Massive PE Resource Payload Exhibiting Classic Worm Capabilities.exe

payload exploit