Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/02/2026, 12:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-02-11_3883160bae19b33094f40502d382c603_elex_wannacry.exe
Resource
win10v2004-20260129-en
4 signatures
150 seconds
General
- Target 2026-02-11_3883160bae19b33094f40502d382c603_elex_wannacry.exe
- Size 247KB
- Sample260211-pd59fshs5a
- SHA256 f1ecff2c7e8eda6fbf885533cfcc67d906c8c3ac68ee55603294fccaab7d3c9b
- MD5 3883160bae19b33094f40502d382c603
- SHA1 4869fb6b33651b1048625e689eb7894d65d00d6c
- SHA512 a7af5707c3759289ce7f65365f9bd428b68937e008aad764b495e815410b78dc25f1dbb393294588d7a8749d1c8e23105d29ad05e8cce5a2eaeff675f6eba558
- SSDEEP 6144:RXyI3W5Y2FclN0iM3K35wJhwlYHbXSq4dm:RXryi4XSq4dm
- TLSH T1FA34AE3AB150DD17F368C1BA43C21CF69B4DBDAC9246DE27DAC4497953C248404EBEEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects PandaZeuS 2 IoCs
resource yara_rule behavioral2/memory/3032-0-0x0000000000400000-0x0000000000623000-memory.dmp family_pandazeus behavioral2/memory/3032-4-0x0000000000400000-0x0000000000623000-memory.dmp family_pandazeus - Pandazeus family
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-02-11_3883160bae19b33094f40502d382c603_elex_wannacry.exe