General
- Target 2026-04-20_565a761c21496bcd016f19569b0f4ec0_elex_wannacry
- Size 35KB
- Sample260420-j2pcyscv9n
- SHA256 547f8f28a82e3fd6048f1b08264cf269054ee0b88cf3148517069df1d4518dad
- MD5 565a761c21496bcd016f19569b0f4ec0
- SHA1 865bcd2baee0dda1a7f9a7697fb5b9e601ebd14c
- SHA512 ebb07cad93d2e5e06b12b6ed30513a95e637b98ed0c95b641837562087f14b34f81d898165a37b3b0fe6fef0384964a598c6afe0a77bf6c2a7683de86b7b5418
- SSDEEP 768:uxckEEd62J798jBk3A6gow6vdBcl5sfuW5nrA8zjc5E:cc3ji6kgi1Bc7sR584jh
- TLSH T1EAF2AD3C6ED91972D3BBDABAC6F691C6BD75B4233D02580E408647840C23F26EDA1B5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-20_565a761c21496bcd016f19569b0f4ec0_elex_wannacry.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_565a761c21496bcd016f19569b0f4ec0_elex_wannacry.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_565a761c21496bcd016f19569b0f4ec0_elex_wannacry
- Size 35KB
- SHA256 547f8f28a82e3fd6048f1b08264cf269054ee0b88cf3148517069df1d4518dad
- MD5 565a761c21496bcd016f19569b0f4ec0
- SHA1 865bcd2baee0dda1a7f9a7697fb5b9e601ebd14c
- SHA512 ebb07cad93d2e5e06b12b6ed30513a95e637b98ed0c95b641837562087f14b34f81d898165a37b3b0fe6fef0384964a598c6afe0a77bf6c2a7683de86b7b5418
- SSDEEP 768:uxckEEd62J798jBk3A6gow6vdBcl5sfuW5nrA8zjc5E:cc3ji6kgi1Bc7sR584jh
- TLSH T1EAF2AD3C6ED91972D3BBDABAC6F691C6BD75B4233D02580E408647840C23F26EDA1B5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE