General
- Target 2026-04-24_edea55ab750c754fdad6d2ab1201cba6_elex_wannacry
- Size 13KB
- Sample260424-khdyjscy2x
- SHA256 c28182b789118845659ad9f6cd6ab0c37c5968014f268e335668628c30e58995
- MD5 edea55ab750c754fdad6d2ab1201cba6
- SHA1 4d760cc2d9dec7c69738f5093f675143410d33c2
- SHA512 b8fdbcddc93c4973cafb436946088b993690422a82c3903af9f17d45c9a06d6e249f18e38e044f1d340e808e89441f1b633156324009ae8503eab5378640571d
- SSDEEP 192:j4vFJB76X8aN3T/MC4kmikwuCl1oynTcd3W6uCcbJrAAAAA4mSHA/Gpv:j4nBHA7f46l1JcV4rAAAAAyA/GB
- TLSH T13E520A165BA4C9B7F3A68934899B571DAB3534C3FD12060ED6A8A309CE72312DC0E63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-24_edea55ab750c754fdad6d2ab1201cba6_elex_wannacry.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_edea55ab750c754fdad6d2ab1201cba6_elex_wannacry.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_edea55ab750c754fdad6d2ab1201cba6_elex_wannacry
- Size 13KB
- SHA256 c28182b789118845659ad9f6cd6ab0c37c5968014f268e335668628c30e58995
- MD5 edea55ab750c754fdad6d2ab1201cba6
- SHA1 4d760cc2d9dec7c69738f5093f675143410d33c2
- SHA512 b8fdbcddc93c4973cafb436946088b993690422a82c3903af9f17d45c9a06d6e249f18e38e044f1d340e808e89441f1b633156324009ae8503eab5378640571d
- SSDEEP 192:j4vFJB76X8aN3T/MC4kmikwuCl1oynTcd3W6uCcbJrAAAAA4mSHA/Gpv:j4nBHA7f46l1JcV4rAAAAAyA/GB
- TLSH T13E520A165BA4C9B7F3A68934899B571DAB3534C3FD12060ED6A8A309CE72312DC0E63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE