Install WanaDecryptor persistence via .lnk file
WannaCry installs a copy of the decryptor, @WanaDecryptor@.exe, in each folder along with a ransom note. This technique stages and writes a PneumaEX agent and corresponding .lnk file.
To view this TTPs command, you must be logged in with a professional or enterprise license.Login
Test this TTP
Download Operator (1.7.1)