General
- Target 2026-04-19_0ecfe780f09731f4e9e9c7441150f892_elex_wannacry
- Size 60KB
- Sample260419-ryp43sh151
- SHA256 f27fc10e55d61830ce6c1c0da08d2e8e7eeb57332681fa096530f68f804ed4eb
- MD5 0ecfe780f09731f4e9e9c7441150f892
- SHA1 ee6d89c4ef877b84f9845ee595b8596a0377382a
- SHA512 d096d1c49b91fb6882810229f42d4288b1a5375ba5b6389b3305e0dcdca4a759c55e8c9e5b8a2138038d4f455c7348647ba03b8b50611723bb1fc12b1eafaff3
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroomaQP4/CFsrFJGlMlrWg6j8s:vvw9816vhKQLroLaQP4/wQTGaWhj8s
- TLSH T1C6537D835BEA2CF2F6F10232057859B5D22B99D4A15DBEDBBB80CE1504372C1D53F10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-19_0ecfe780f09731f4e9e9c7441150f892_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_0ecfe780f09731f4e9e9c7441150f892_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_0ecfe780f09731f4e9e9c7441150f892_elex_wannacry
- Size 60KB
- SHA256 f27fc10e55d61830ce6c1c0da08d2e8e7eeb57332681fa096530f68f804ed4eb
- MD5 0ecfe780f09731f4e9e9c7441150f892
- SHA1 ee6d89c4ef877b84f9845ee595b8596a0377382a
- SHA512 d096d1c49b91fb6882810229f42d4288b1a5375ba5b6389b3305e0dcdca4a759c55e8c9e5b8a2138038d4f455c7348647ba03b8b50611723bb1fc12b1eafaff3
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroomaQP4/CFsrFJGlMlrWg6j8s:vvw9816vhKQLroLaQP4/wQTGaWhj8s
- TLSH T1C6537D835BEA2CF2F6F10232057859B5D22B99D4A15DBEDBBB80CE1504372C1D53F10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE