General
- Target 2026-04-23_8eb1d027ae7b1528168a8026f9e6796b_elex_wannacry
- Size 64KB
- Sample260423-ekm2caat41
- SHA256 b972f90a8536715343eb2f78384e7b13e689414f7bf07b09dc2c6ca3ca3edb10
- MD5 8eb1d027ae7b1528168a8026f9e6796b
- SHA1 16eb69cea6c75db2e0e0f6ac7a4dccc74fb5fabe
- SHA512 1a94c719486b1e3ad56a0ff067db34c992024f2efa922d408b8aa8ed0b4f0297dd7dd4ffa3ffc59c0d1d044a655dc05170d75f5eba6c8912821cfdc5808ed2ca
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwdY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroP4/CFsrdY
- TLSH T1CD53E94B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED038426D4198F5D6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-23_8eb1d027ae7b1528168a8026f9e6796b_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_8eb1d027ae7b1528168a8026f9e6796b_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_8eb1d027ae7b1528168a8026f9e6796b_elex_wannacry
- Size 64KB
- SHA256 b972f90a8536715343eb2f78384e7b13e689414f7bf07b09dc2c6ca3ca3edb10
- MD5 8eb1d027ae7b1528168a8026f9e6796b
- SHA1 16eb69cea6c75db2e0e0f6ac7a4dccc74fb5fabe
- SHA512 1a94c719486b1e3ad56a0ff067db34c992024f2efa922d408b8aa8ed0b4f0297dd7dd4ffa3ffc59c0d1d044a655dc05170d75f5eba6c8912821cfdc5808ed2ca
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwdY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroP4/CFsrdY
- TLSH T1CD53E94B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED038426D4198F5D6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE