General
- Target 2026-04-18_e9ae13f0f15ea8efb3eec75a302ba34b_elex_upatre_wannacry
- Size 55KB
- Sample260418-dkvkrafw7x
- SHA256 dc409ddf87ee73fc29cb53b0466b3db7287a2e6df46c050bee2fdf6c3450c8c1
- MD5 e9ae13f0f15ea8efb3eec75a302ba34b
- SHA1 bd0339e5536ecdf19d5ef144bdae6a21e319d85d
- SHA512 f8fe7c1f4d723c0c068ff2ecb6e7eaf597a3eb804b3fc5d9af6a235f1a6bc6a3fafc16bdf593475c02f220ea832c3ce0ac1b74c46dabea88cc4f6db7b8108fe7
- SSDEEP 768:BW9+FP4BPtYggggggLvggggggggUaocHMoknj3+LxNIf6piS:SaoVbnzYxN
- TLSH T11F4387346AD51672E37B9E7586F251CAA87DBC233D03680D4071F7440AB3FD2ADA1A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-18_e9ae13f0f15ea8efb3eec75a302ba34b_elex_upatre_wannacry.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_e9ae13f0f15ea8efb3eec75a302ba34b_elex_upatre_wannacry.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_e9ae13f0f15ea8efb3eec75a302ba34b_elex_upatre_wannacry
- Size 55KB
- SHA256 dc409ddf87ee73fc29cb53b0466b3db7287a2e6df46c050bee2fdf6c3450c8c1
- MD5 e9ae13f0f15ea8efb3eec75a302ba34b
- SHA1 bd0339e5536ecdf19d5ef144bdae6a21e319d85d
- SHA512 f8fe7c1f4d723c0c068ff2ecb6e7eaf597a3eb804b3fc5d9af6a235f1a6bc6a3fafc16bdf593475c02f220ea832c3ce0ac1b74c46dabea88cc4f6db7b8108fe7
- SSDEEP 768:BW9+FP4BPtYggggggLvggggggggUaocHMoknj3+LxNIf6piS:SaoVbnzYxN
- TLSH T11F4387346AD51672E37B9E7586F251CAA87DBC233D03680D4071F7440AB3FD2ADA1A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE