General
- Target 2026-04-22_28e99d09a5a42395e72bc7b6ebc60d35_elex_wannacry
- Size 103KB
- Sample260422-rtb2nacw7v
- SHA256 47195c6d5e582bbc5ab0c8efb7870d1a5231ae166c573c5f258627dd0a9c885f
- MD5 28e99d09a5a42395e72bc7b6ebc60d35
- SHA1 7ac5863d08a31c0944b9e9830793370be9d5fafa
- SHA512 731c101a9e2a04cd66e188d2b2a85fd9002cabf5d1e4c3cb3683c4d0c5818bac60fae69e5db7d3d39cbd0323dad1605d747f14178e73fe58be23c58a6ffbe144
- SSDEEP 768:Qvw9816vhKQLroG4/wQRNrfrunMxVFA3b7glwRjMlfwGxEIU:YEGh0oGl2unMxVS3Hgdor
- TLSH T1ACA3FE395FEA1036E1B3DA759AF156DAFE36F85339054E0E019203064D23F12ED96E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-22_28e99d09a5a42395e72bc7b6ebc60d35_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_28e99d09a5a42395e72bc7b6ebc60d35_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_28e99d09a5a42395e72bc7b6ebc60d35_elex_wannacry
- Size 103KB
- SHA256 47195c6d5e582bbc5ab0c8efb7870d1a5231ae166c573c5f258627dd0a9c885f
- MD5 28e99d09a5a42395e72bc7b6ebc60d35
- SHA1 7ac5863d08a31c0944b9e9830793370be9d5fafa
- SHA512 731c101a9e2a04cd66e188d2b2a85fd9002cabf5d1e4c3cb3683c4d0c5818bac60fae69e5db7d3d39cbd0323dad1605d747f14178e73fe58be23c58a6ffbe144
- SSDEEP 768:Qvw9816vhKQLroG4/wQRNrfrunMxVFA3b7glwRjMlfwGxEIU:YEGh0oGl2unMxVS3Hgdor
- TLSH T1ACA3FE395FEA1036E1B3DA759AF156DAFE36F85339054E0E019203064D23F12ED96E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE