General
- Target 2026-05-02_81327bb3ef14aa68e154413cc68a788b_elex_wannacry
- Size 64KB
- Sample260502-precwsbv2q
- SHA256 0016e5398efe8fcfdb8b97f89f555320405ec55abd187addc57773c7c98f7258
- MD5 81327bb3ef14aa68e154413cc68a788b
- SHA1 8f6a80fcd73f3625f1ba806157b53da3011ae75c
- SHA512 36a26ce80d9a9b243e3dc1700c0e69bb37472130c41c587a099c2225f1b3339b6a92d38a2bf19823b4fbd945327a148d18d93a94d6dec1dd67194a9bad7a05c1
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwHY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLro54/CFsrdY
- TLSH T19153E94B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED138426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-02_81327bb3ef14aa68e154413cc68a788b_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-02_81327bb3ef14aa68e154413cc68a788b_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_81327bb3ef14aa68e154413cc68a788b_elex_wannacry
- Size 64KB
- SHA256 0016e5398efe8fcfdb8b97f89f555320405ec55abd187addc57773c7c98f7258
- MD5 81327bb3ef14aa68e154413cc68a788b
- SHA1 8f6a80fcd73f3625f1ba806157b53da3011ae75c
- SHA512 36a26ce80d9a9b243e3dc1700c0e69bb37472130c41c587a099c2225f1b3339b6a92d38a2bf19823b4fbd945327a148d18d93a94d6dec1dd67194a9bad7a05c1
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwHY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLro54/CFsrdY
- TLSH T19153E94B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED138426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE