Zero-Dwell Threat Intelligence Reports

WannaCryptor Payload Masquerading As Tasksche Executable For Persistence.exe

WannaCry–Expiro Hybrid Executable Triggering Killswitch Domain Lookups.exe

long-sleeps detect-debug-environment malware exploit cve-2017-0147

WannaCryptor Payload Built With Legacy Visual Studio Six Toolchain.exe

overlay detect-debug-environment

WannaCry Ransomware Variant Compiled With VS2008 Toolchain.exe

overlay corrupt

Malicious .NET Executable Exhibiting WannaCry-Themed Ransomware Traits.exe

overlay corrupt assembly

Hybrid LockBit Sample Showing Worm-Like Network Enumeration Behavior.exe

payload

WannaCry Payload Leveraging CVE-2017-0147 For Network Propagation.exe

payload exploit cve-2017-0147

Massive PE Resource Payload Exhibiting Classic Worm Capabilities.exe

payload exploit

WannaCry-Themed Dropper Deleting Shadow Copies For Impact.exe

long-sleeps detect-debug-environment assembly

Legacy WannaCrypt Payload Compiled With Visual Studio 98 Toolchain.exe

payload

WannaCry Ransomware Variant Embedding Classic Tor Onion C2 Paths.exe

payload

Classic WannaCrypt Payload Compiled With Legacy Visual Studio Tools.exe

payload