General
- Target 2026-04-27_fe0cb49a452e0d52bb15c84ffe5f439b_elex_wannacry
- Size 64KB
- Sample260427-th3rcaew81
- SHA256 0e2401f7a789e45f31ee97f69884295047131caec7db2344ea694d0167bb5d99
- MD5 fe0cb49a452e0d52bb15c84ffe5f439b
- SHA1 2b0fafb8e38342e8c6cbe52eabe38714bd15c7de
- SHA512 f05942876014ce8a2b0a86564b2f6eeb73d693b6bde2044732a8c7e1667933373209ea3b1bc28960275107e4b4a677332cacb1221a5d5b1652ebe5358982b4cb
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwETY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroc4/CFsrdY
- TLSH T18853E94B879D84B7E980C1389F3885BFB22B56CCB1096D5E97ECED038426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-27_fe0cb49a452e0d52bb15c84ffe5f439b_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-27_fe0cb49a452e0d52bb15c84ffe5f439b_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-27_fe0cb49a452e0d52bb15c84ffe5f439b_elex_wannacry
- Size 64KB
- SHA256 0e2401f7a789e45f31ee97f69884295047131caec7db2344ea694d0167bb5d99
- MD5 fe0cb49a452e0d52bb15c84ffe5f439b
- SHA1 2b0fafb8e38342e8c6cbe52eabe38714bd15c7de
- SHA512 f05942876014ce8a2b0a86564b2f6eeb73d693b6bde2044732a8c7e1667933373209ea3b1bc28960275107e4b4a677332cacb1221a5d5b1652ebe5358982b4cb
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwETY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroc4/CFsrdY
- TLSH T18853E94B879D84B7E980C1389F3885BFB22B56CCB1096D5E97ECED038426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE