General
- Target 2026-04-18_12b611e334875b1c002597c47cdef68a_elex_wannacry
- Size 145KB
- Sample260418-errywagt4v
- SHA256 1ba40b71e45821715380821dddbefdb0a76e4999cd237108c69fb2a02f527b03
- MD5 12b611e334875b1c002597c47cdef68a
- SHA1 1825599e2d9c969a60ffe2cc763706f8cda8221c
- SHA512 f074c571177a98b1bb158307918c98533f1e7ee75749752ecf9d8c6fef9ef51db42aaf54fa519b726b76d560b7112442a46dbe06a37ee84934cb2b1f3a79cfae
- SSDEEP 3072:pw5Ha2zlnz7wfOFg9YDGDXlcl+JEGLy1+gF6:2da2zlPRlS1efGuEgQ
- TLSH T189E3AD06BA084732D51AC3711D2F6D364F51AF2C28E0926F67A26E0F2DB07B15E5D26F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_12b611e334875b1c002597c47cdef68a_elex_wannacry.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_12b611e334875b1c002597c47cdef68a_elex_wannacry.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_12b611e334875b1c002597c47cdef68a_elex_wannacry
- Size 145KB
- SHA256 1ba40b71e45821715380821dddbefdb0a76e4999cd237108c69fb2a02f527b03
- MD5 12b611e334875b1c002597c47cdef68a
- SHA1 1825599e2d9c969a60ffe2cc763706f8cda8221c
- SHA512 f074c571177a98b1bb158307918c98533f1e7ee75749752ecf9d8c6fef9ef51db42aaf54fa519b726b76d560b7112442a46dbe06a37ee84934cb2b1f3a79cfae
- SSDEEP 3072:pw5Ha2zlnz7wfOFg9YDGDXlcl+JEGLy1+gF6:2da2zlPRlS1efGuEgQ
- TLSH T189E3AD06BA084732D51AC3711D2F6D364F51AF2C28E0926F67A26E0F2DB07B15E5D26F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks whether UAC is enabled
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.