General
- Target 2026-04-18_8e16ee02e4dd32ef10a25a302db0f34c_elex_wannacry
- Size 168KB
- Sample260418-egbtxaf131
- SHA256 4f1cee4be266af7348bf391f39c4eef4a0a0a87beaffb0ba646c6913fbffafc8
- MD5 8e16ee02e4dd32ef10a25a302db0f34c
- SHA1 31d7c76621e619a5c8d8a05dd9196e89d0e0ce20
- SHA512 767b67707f819e170156d463395504a6083d3778f5ba4f9b27c19379ff98c8a78ee185c713113667f74afcaac5d8def81e6f79729088f9f0487e125ac829f687
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwm4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLrom4/CFsrd
- TLSH T1D5F319834BDE58F3F785113008798AB9927B9AD4921EBEEF7F90CD250077252D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-18_8e16ee02e4dd32ef10a25a302db0f34c_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_8e16ee02e4dd32ef10a25a302db0f34c_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_8e16ee02e4dd32ef10a25a302db0f34c_elex_wannacry
- Size 168KB
- SHA256 4f1cee4be266af7348bf391f39c4eef4a0a0a87beaffb0ba646c6913fbffafc8
- MD5 8e16ee02e4dd32ef10a25a302db0f34c
- SHA1 31d7c76621e619a5c8d8a05dd9196e89d0e0ce20
- SHA512 767b67707f819e170156d463395504a6083d3778f5ba4f9b27c19379ff98c8a78ee185c713113667f74afcaac5d8def81e6f79729088f9f0487e125ac829f687
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwm4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLrom4/CFsrd
- TLSH T1D5F319834BDE58F3F785113008798AB9927B9AD4921EBEEF7F90CD250077252D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE