General
- Target 2026-04-21_fde8b2913591c321616de42f3509ca83_elex_wannacry
- Size 66KB
- Sample260421-fa11wsbx81
- SHA256 b5734ef5957d1b989ea9b2acf98a41312e6afd4b2362a6183f748317c6ce99b7
- MD5 fde8b2913591c321616de42f3509ca83
- SHA1 d632b4e55bd1cd8615a056f921597fa63b9b5aa0
- SHA512 443c610e21700c1488bd2fb0f642715170147e7823f409e1bc83be357128de39fa354add0c0d4106f83a4d5e1ccbdf998ab734e2d5d6ee631ec000ba20b3774f
- SSDEEP 768:n6yLumOhQkoDBY+4BnJnV5CLUe+Ykf+HI15hzMNl9tPyjf/gQVdPhJPPPP5qqqq2:9LunhbYWNPCLUQ/HItWt6b/gQVdPhK
- TLSH T1A6639E16D7448C46DA14873E8B6A87335FE7CD385EE60E4BBB4CC59C182AB406E5E38D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_fde8b2913591c321616de42f3509ca83_elex_wannacry.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_fde8b2913591c321616de42f3509ca83_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_fde8b2913591c321616de42f3509ca83_elex_wannacry
- Size 66KB
- SHA256 b5734ef5957d1b989ea9b2acf98a41312e6afd4b2362a6183f748317c6ce99b7
- MD5 fde8b2913591c321616de42f3509ca83
- SHA1 d632b4e55bd1cd8615a056f921597fa63b9b5aa0
- SHA512 443c610e21700c1488bd2fb0f642715170147e7823f409e1bc83be357128de39fa354add0c0d4106f83a4d5e1ccbdf998ab734e2d5d6ee631ec000ba20b3774f
- SSDEEP 768:n6yLumOhQkoDBY+4BnJnV5CLUe+Ykf+HI15hzMNl9tPyjf/gQVdPhJPPPP5qqqq2:9LunhbYWNPCLUQ/HItWt6b/gQVdPhK
- TLSH T1A6639E16D7448C46DA14873E8B6A87335FE7CD385EE60E4BBB4CC59C182AB406E5E38D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.