General
- Target 2026-04-15_878fa79e98d105d2357e9a7aa2cb6b9e_elex_wannacry
- Size 59KB
- Sample260415-extpnaev9r
- SHA256 4fd06b42dbdaa1ce61f7f922cfaa7c9834c6e07ac58c0e6961e6ea6f9a6b2432
- MD5 878fa79e98d105d2357e9a7aa2cb6b9e
- SHA1 477e84070eda832ba6c4c0a20b57af1785b9b5a5
- SHA512 de872398a58f904d6f6c46d6b5940840db6c104491f0d3a0424f6020535d3ac840718104f042ec51e72c4e6444eb22adba51a14d8159f508e23d51e8f0776222
- SSDEEP 192:kbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw1Y04/CFxyNhoy5t:kbLwOs8AHsc4sMfwhKQLroH4/CFsrd
- TLSH T1214309834BDE9CF2F791123108794AB9927B9AD4910EBE9FBF90CD540037292E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-15_878fa79e98d105d2357e9a7aa2cb6b9e_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_878fa79e98d105d2357e9a7aa2cb6b9e_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_878fa79e98d105d2357e9a7aa2cb6b9e_elex_wannacry
- Size 59KB
- SHA256 4fd06b42dbdaa1ce61f7f922cfaa7c9834c6e07ac58c0e6961e6ea6f9a6b2432
- MD5 878fa79e98d105d2357e9a7aa2cb6b9e
- SHA1 477e84070eda832ba6c4c0a20b57af1785b9b5a5
- SHA512 de872398a58f904d6f6c46d6b5940840db6c104491f0d3a0424f6020535d3ac840718104f042ec51e72c4e6444eb22adba51a14d8159f508e23d51e8f0776222
- SSDEEP 192:kbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw1Y04/CFxyNhoy5t:kbLwOs8AHsc4sMfwhKQLroH4/CFsrd
- TLSH T1214309834BDE9CF2F791123108794AB9927B9AD4910EBE9FBF90CD540037292E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE