General
- Target 2026-04-28_0935b222e619f54beda8010b4abbada9_elex_wannacry
- Size 382KB
- Sample260428-a9bmdsby8x
- SHA256 825bf0a4a0f52aca0d27c63f21861b4ae73b93cbad3a4d83454013eab9319e11
- MD5 0935b222e619f54beda8010b4abbada9
- SHA1 b283bd23a012fbb989f6d70d4c0e46f38deec399
- SHA512 5b1376c67bc67db12f465c5996a749a248f6ac2dd6838c80976918126e8bf04c0bf0bd534b634ded70fd6c1ef99fa52a5943e9bfdc293a010690a5371b9a9b25
- SSDEEP 3072:63ZUbUseVgDi934Q+G94bR/hsmUeg89SDGTBpB4SSxrs5EmtPxn4RHW8T9E:729oiIlhHVBpBfDt2B
- TLSH T10A84AE157E75DC38E2CC8D707A168ABA3D152F8C4FBDAA292914374C2EF078646DE718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-28_0935b222e619f54beda8010b4abbada9_elex_wannacry.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-28_0935b222e619f54beda8010b4abbada9_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-28_0935b222e619f54beda8010b4abbada9_elex_wannacry
- Size 382KB
- SHA256 825bf0a4a0f52aca0d27c63f21861b4ae73b93cbad3a4d83454013eab9319e11
- MD5 0935b222e619f54beda8010b4abbada9
- SHA1 b283bd23a012fbb989f6d70d4c0e46f38deec399
- SHA512 5b1376c67bc67db12f465c5996a749a248f6ac2dd6838c80976918126e8bf04c0bf0bd534b634ded70fd6c1ef99fa52a5943e9bfdc293a010690a5371b9a9b25
- SSDEEP 3072:63ZUbUseVgDi934Q+G94bR/hsmUeg89SDGTBpB4SSxrs5EmtPxn4RHW8T9E:729oiIlhHVBpBfDt2B
- TLSH T10A84AE157E75DC38E2CC8D707A168ABA3D152F8C4FBDAA292914374C2EF078646DE718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.