General
- Target 2026-04-24_db9740f07e6a1a18096bb1791aa2c20e_elex_wannacry
- Size 116KB
- Sample260424-vs3prsfy3j
- SHA256 4cbcc235e7ec13e2a6147d1c4d6368b5cf8ef25d4f6dcc71397ff44e253ffb98
- MD5 db9740f07e6a1a18096bb1791aa2c20e
- SHA1 06407b4ef981ff4d09d1ff598829babeb7fe9a47
- SHA512 1f57becd4f35d8a2e38672aa5d9658b496723e2f42c850641cf320056bf41a3a7d00be6ce3b8ee1f89e23415192e7962250ebd650386ca9999bdec072628a63d
- SSDEEP 768:Qvw9816vhKQLros4/wQRNrfrunMxVFA3b7glwRjMlfwGxEI5nWAwxt6sDntNiLJN:YEGh0osl2unMxVS3HgdoKjhLJhL
- TLSH T19AC3C1295FEA0026F1F3D6749AF556DABE36FC5339058E0E019203064D22F16ED96E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-24_db9740f07e6a1a18096bb1791aa2c20e_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_db9740f07e6a1a18096bb1791aa2c20e_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_db9740f07e6a1a18096bb1791aa2c20e_elex_wannacry
- Size 116KB
- SHA256 4cbcc235e7ec13e2a6147d1c4d6368b5cf8ef25d4f6dcc71397ff44e253ffb98
- MD5 db9740f07e6a1a18096bb1791aa2c20e
- SHA1 06407b4ef981ff4d09d1ff598829babeb7fe9a47
- SHA512 1f57becd4f35d8a2e38672aa5d9658b496723e2f42c850641cf320056bf41a3a7d00be6ce3b8ee1f89e23415192e7962250ebd650386ca9999bdec072628a63d
- SSDEEP 768:Qvw9816vhKQLros4/wQRNrfrunMxVFA3b7glwRjMlfwGxEI5nWAwxt6sDntNiLJN:YEGh0osl2unMxVS3HgdoKjhLJhL
- TLSH T19AC3C1295FEA0026F1F3D6749AF556DABE36FC5339058E0E019203064D22F16ED96E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE