General
- Target 2026-04-22_686a698ba8e300424b46009a05ab9600_elex_wannacry
- Size 382KB
- Sample260422-e6k4wag14k
- SHA256 abd8e500260eac3a028cb29b4185a6f598fd3b92c9499991f895eab58899dcdc
- MD5 686a698ba8e300424b46009a05ab9600
- SHA1 fd64d88303c7cb82bfaa4ee980702f204c6ca283
- SHA512 09af433557c50d1cd03e2cc1290a8c5f54562ed02004dc17f3eeb4aebfb2f4b7d8effdd39ae12ad71f28842ce2253a109e7a79ff0822bcc0fee0067d38e89b30
- SSDEEP 3072:ODZv6EBr4SPBadUAQO7/tw5y7g7cOwnGUckLdiuwbRHVd8my8fq3PYs+VN0t:iAESS5aRV6ysccTOdiVRHX8mnWRt
- TLSH T11D8459B2F22F5A2AF6C54AF259FF863552E50CEA381038EA6A51B64D7C70D513B40D3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_686a698ba8e300424b46009a05ab9600_elex_wannacry.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_686a698ba8e300424b46009a05ab9600_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_686a698ba8e300424b46009a05ab9600_elex_wannacry
- Size 382KB
- SHA256 abd8e500260eac3a028cb29b4185a6f598fd3b92c9499991f895eab58899dcdc
- MD5 686a698ba8e300424b46009a05ab9600
- SHA1 fd64d88303c7cb82bfaa4ee980702f204c6ca283
- SHA512 09af433557c50d1cd03e2cc1290a8c5f54562ed02004dc17f3eeb4aebfb2f4b7d8effdd39ae12ad71f28842ce2253a109e7a79ff0822bcc0fee0067d38e89b30
- SSDEEP 3072:ODZv6EBr4SPBadUAQO7/tw5y7g7cOwnGUckLdiuwbRHVd8my8fq3PYs+VN0t:iAESS5aRV6ysccTOdiVRHX8mnWRt
- TLSH T11D8459B2F22F5A2AF6C54AF259FF863552E50CEA381038EA6A51B64D7C70D513B40D3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.