General
- Target 2026-04-17_25b9f45900490715dfb1da49fd71106a_elex_wannacry
- Size 60KB
- Sample260417-sd4meacz7t
- SHA256 91e935fa8cb4f35479e34831f4af78c6973caa9eb959390efe074f3fde4ac08c
- MD5 25b9f45900490715dfb1da49fd71106a
- SHA1 ed5e8071ae36b16eb64c76fd637da6c8f549f3d3
- SHA512 25f6c2decf53bea19665fadf7c9448aa74e937ee42a2645e0e0a356cf691b5f6e586c50ecb784a48f3941f2608ad14857a31ea23fbd83322ac0c236df94ba5ff
- SSDEEP 192:XbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwFY04/CFxyNhoy5t:XbLwOs8AHsc4sMfwhKQLro34/CFsrd
- TLSH T15A5309834BDE5CF2F795127108794AB9927B9AC4910EBE9FBF90CD540037692E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-17_25b9f45900490715dfb1da49fd71106a_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_25b9f45900490715dfb1da49fd71106a_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_25b9f45900490715dfb1da49fd71106a_elex_wannacry
- Size 60KB
- SHA256 91e935fa8cb4f35479e34831f4af78c6973caa9eb959390efe074f3fde4ac08c
- MD5 25b9f45900490715dfb1da49fd71106a
- SHA1 ed5e8071ae36b16eb64c76fd637da6c8f549f3d3
- SHA512 25f6c2decf53bea19665fadf7c9448aa74e937ee42a2645e0e0a356cf691b5f6e586c50ecb784a48f3941f2608ad14857a31ea23fbd83322ac0c236df94ba5ff
- SSDEEP 192:XbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwFY04/CFxyNhoy5t:XbLwOs8AHsc4sMfwhKQLro34/CFsrd
- TLSH T15A5309834BDE5CF2F795127108794AB9927B9AC4910EBE9FBF90CD540037692E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE