General
- Target 2026-04-22_d36621b2c08f157d74b9a5c68c237251_elex_wannacry
- Size 59KB
- Sample260422-tyf8aabw4j
- SHA256 3423a068fc131c78fd215e6ec9e4c95492b9bc21a54c5cef541a1bc5a725072e
- MD5 d36621b2c08f157d74b9a5c68c237251
- SHA1 1966f950e7ae92faf6690510e2a3ad67ffef2a31
- SHA512 52d811dedbf918ab008075ab5655af284a5f56fa1962f08926983d9a99653f9491971d78a31d904d841931c21a47e7ca5dc6808a90b56c56152d4b5eb8099083
- SSDEEP 192:MbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwzY04/CFxyNhoy5t:MbLwOs8AHsc4sMfwhKQLroV4/CFsrd
- TLSH T1C043F7834BEE9CF2F791113108798AB9927B99D4950EBEDFBF90CD154037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-22_d36621b2c08f157d74b9a5c68c237251_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_d36621b2c08f157d74b9a5c68c237251_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_d36621b2c08f157d74b9a5c68c237251_elex_wannacry
- Size 59KB
- SHA256 3423a068fc131c78fd215e6ec9e4c95492b9bc21a54c5cef541a1bc5a725072e
- MD5 d36621b2c08f157d74b9a5c68c237251
- SHA1 1966f950e7ae92faf6690510e2a3ad67ffef2a31
- SHA512 52d811dedbf918ab008075ab5655af284a5f56fa1962f08926983d9a99653f9491971d78a31d904d841931c21a47e7ca5dc6808a90b56c56152d4b5eb8099083
- SSDEEP 192:MbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwzY04/CFxyNhoy5t:MbLwOs8AHsc4sMfwhKQLroV4/CFsrd
- TLSH T1C043F7834BEE9CF2F791113108798AB9927B99D4950EBEDFBF90CD154037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE