General

  • Target
    2026-04-25_5086e172e8e575a79bb03b9463b414bb_elex_wannacry
  • Size 30KB
  • Sample260425-kkhdract9v
  • SHA256 8461be510e70c0582716a9d10fe4c8209fac4caf2c0f633d25ca68315f4a3e67
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-04-25_5086e172e8e575a79bb03b9463b414bb_elex_wannacry
    • Size 30KB
    • SHA256 8461be510e70c0582716a9d10fe4c8209fac4caf2c0f633d25ca68315f4a3e67
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Waski payload

    • Family: Waski

      Waski is a trojan downloader written in C++.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks