WannaCry Ransomware Detected

LetsDefend Monitoring Alert

Mar, 15, 2023, 02:41 PM

Event ID: 128

Event Time: Mar, 15, 2023, 02:41 PM

Rule Name: SOC178 - WannaCry Ransomware Detected

Alert Type: Ransomware

MITRE Technique:

T1486 - Impact - Data Encrypted for Impact,

T1566 - Initial Access - Phishing,

T1059.001 - Execution - Command and Scripting Interpreter: PowerShell,

T1059 - Execution - Command and Scripting Interpreter,

Severity: Critical

Incident Responder

45305 Catalina ct. Suite 150, Sterling VA 20166