General
- Target 2026-04-21_f3e122eb71cd458d9b2c15043b08ad10_elex_wannacry
- Size 69KB
- Sample260421-e76rzabx4s
- SHA256 031f094f7b58847817909a29fb017c2eef672f717a19b5e40051e66f8629490d
- MD5 f3e122eb71cd458d9b2c15043b08ad10
- SHA1 90953dc5d5076c54a009d8ee10d54723bf3641ce
- SHA512 66a50ff3703d54e6f1323e56f2ff350bb571ea57d448ae68e88e4b818577c69d4726abb4202d7e99b573fe17a12b55d54e2d0410422435d23dd9ac04485dfbc1
- SSDEEP 768:n6yLumOhQkoDBY+4BnJnV5CLUe+Ykf+HI15hzMNl9tPyjf/gQVdPOn:9LunhbYWNPCLUQ/HItWt6b/gQVdPs
- TLSH T11D639E16DB548C4BDA24873D4B6A87731EE3CC384AEA0D4BBB4CD95C5D26B406D1E38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_f3e122eb71cd458d9b2c15043b08ad10_elex_wannacry.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_f3e122eb71cd458d9b2c15043b08ad10_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_f3e122eb71cd458d9b2c15043b08ad10_elex_wannacry
- Size 69KB
- SHA256 031f094f7b58847817909a29fb017c2eef672f717a19b5e40051e66f8629490d
- MD5 f3e122eb71cd458d9b2c15043b08ad10
- SHA1 90953dc5d5076c54a009d8ee10d54723bf3641ce
- SHA512 66a50ff3703d54e6f1323e56f2ff350bb571ea57d448ae68e88e4b818577c69d4726abb4202d7e99b573fe17a12b55d54e2d0410422435d23dd9ac04485dfbc1
- SSDEEP 768:n6yLumOhQkoDBY+4BnJnV5CLUe+Ykf+HI15hzMNl9tPyjf/gQVdPOn:9LunhbYWNPCLUQ/HItWt6b/gQVdPs
- TLSH T11D639E16DB548C4BDA24873D4B6A87731EE3CC384AEA0D4BBB4CD95C5D26B406D1E38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.