General
- Target 2026-04-19_0656065a2ef03a37e1ddcd9d987f675b_elex_hacktools_wannacry
- Size 737KB
- Sample260419-pfqa1sey71
- SHA256 90ca0cc5c53f02889b80c89d56c856e363f5c57e524aeac8d18b67125b950cb8
- MD5 0656065a2ef03a37e1ddcd9d987f675b
- SHA1 4be25c46ac9ab2141645732247c5577f8cb4c900
- SHA512 ba3eb0a6a744cb1c3bca57d7f8cc7b6a55f2f91d1f1e5d7559d18ff8df438940aff8d3287863efe67985add648d2a8a0db561682a180e65c6dd29b2eaf81f91b
- SSDEEP 12288:e2QKNGp2YPjE0d63iVg5Bfi781Rt1hpGqzdpW9eKVQvTPRpsbS5hggE:eSIp2Ydd6SVcpz1RtXpGadsbStE
- TLSH T1B7F4AD137985807FC17205318A9A2B72EAF5BE640E3789476388FB2C5E799219F1337D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-19_0656065a2ef03a37e1ddcd9d987f675b_elex_hacktools_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_0656065a2ef03a37e1ddcd9d987f675b_elex_hacktools_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_0656065a2ef03a37e1ddcd9d987f675b_elex_hacktools_wannacry
- Size 737KB
- SHA256 90ca0cc5c53f02889b80c89d56c856e363f5c57e524aeac8d18b67125b950cb8
- MD5 0656065a2ef03a37e1ddcd9d987f675b
- SHA1 4be25c46ac9ab2141645732247c5577f8cb4c900
- SHA512 ba3eb0a6a744cb1c3bca57d7f8cc7b6a55f2f91d1f1e5d7559d18ff8df438940aff8d3287863efe67985add648d2a8a0db561682a180e65c6dd29b2eaf81f91b
- SSDEEP 12288:e2QKNGp2YPjE0d63iVg5Bfi781Rt1hpGqzdpW9eKVQvTPRpsbS5hggE:eSIp2Ydd6SVcpz1RtXpGadsbStE
- TLSH T1B7F4AD137985807FC17205318A9A2B72EAF5BE640E3789476388FB2C5E799219F1337D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: FlawedAmmyy RAT
Remote-access trojan based on leaked code for the Ammyy remote admin software.
-
Drops file in System32 directory