General
- Target 2026-04-20_00697bd7c2e1ebc05814409c94255895_elex_wannacry
- Size 532KB
- Sample260420-m7d1yscv4x
- SHA256 4811a34171c40e4b914174e5b1e175c9b1fa4361849a325a8b984354736f323f
- MD5 00697bd7c2e1ebc05814409c94255895
- SHA1 897920c51c148ef54ea35707d17ea4555abf4d29
- SHA512 2f4caae291d0bccd82365161d4f801b8db11fdcee571e69ab395a1d9e219dd254f766ed2e4185329ef49c86d1d48c6faa2a5fa67d18c75d6e9ffe9ffb2c3bdb6
- SSDEEP 3072:w94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQ6c:U4sZBOZdjEYTPXMhaMP/kFTA7OAW
- TLSH T1F4C41C3406B18E04D463C3B42C950D955D691EF9CDF86796C707A0AE29BD3FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_00697bd7c2e1ebc05814409c94255895_elex_wannacry.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_00697bd7c2e1ebc05814409c94255895_elex_wannacry.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_00697bd7c2e1ebc05814409c94255895_elex_wannacry
- Size 532KB
- SHA256 4811a34171c40e4b914174e5b1e175c9b1fa4361849a325a8b984354736f323f
- MD5 00697bd7c2e1ebc05814409c94255895
- SHA1 897920c51c148ef54ea35707d17ea4555abf4d29
- SHA512 2f4caae291d0bccd82365161d4f801b8db11fdcee571e69ab395a1d9e219dd254f766ed2e4185329ef49c86d1d48c6faa2a5fa67d18c75d6e9ffe9ffb2c3bdb6
- SSDEEP 3072:w94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQ6c:U4sZBOZdjEYTPXMhaMP/kFTA7OAW
- TLSH T1F4C41C3406B18E04D463C3B42C950D955D691EF9CDF86796C707A0AE29BD3FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory