General
- Target 2026-04-15_80b9648ade6e61925f7da0ee51fb13d3_elex_wannacry
- Size 60KB
- Sample260415-eqpr5aet9r
- SHA256 5e799f53083c02b584155761db83b8e6f51c03d8f852b400f10b28fd2804b7f3
- MD5 80b9648ade6e61925f7da0ee51fb13d3
- SHA1 61bb4a63649765209ebc75601d29532f45df6b9f
- SHA512 c63fc60c0483ba821fb880131e57869145b3b8a043f0b8f17b6f55f95a7199f58e8335421f6d73b04d691e2dcee09d31edd57e6b57b1bd3895fae56a1092a18a
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroomaQ14/CFsrFJGlMlrWg6j8s:vvw9816vhKQLroLaQ14/wQTGaWhj8s
- TLSH T144537C835BEA2CF2F6F10232057859B5D22B9AD4A15DBEDBBB80CE1504372C1D53F10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-15_80b9648ade6e61925f7da0ee51fb13d3_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_80b9648ade6e61925f7da0ee51fb13d3_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_80b9648ade6e61925f7da0ee51fb13d3_elex_wannacry
- Size 60KB
- SHA256 5e799f53083c02b584155761db83b8e6f51c03d8f852b400f10b28fd2804b7f3
- MD5 80b9648ade6e61925f7da0ee51fb13d3
- SHA1 61bb4a63649765209ebc75601d29532f45df6b9f
- SHA512 c63fc60c0483ba821fb880131e57869145b3b8a043f0b8f17b6f55f95a7199f58e8335421f6d73b04d691e2dcee09d31edd57e6b57b1bd3895fae56a1092a18a
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroomaQ14/CFsrFJGlMlrWg6j8s:vvw9816vhKQLroLaQ14/wQTGaWhj8s
- TLSH T144537C835BEA2CF2F6F10232057859B5D22B9AD4A15DBEDBBB80CE1504372C1D53F10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE