Install WanaCry persistence via registry
Tactic: Persistence
WannaCry uses the Windows registry Run key for persistence. This technique stages and writes a PneumaEX agent to disk and configures the Run key to start it.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.
LoginTest this TTP
Download Operator (1.7.1)
Test this TTP using one of our Operator chains
Perform lateral movement using EternalBlue and DoublePulsar exploits.
APT38 WannaCry
2022-05-31
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github