General
- Target 2026-05-02_1781b0d22533fd775170708dcad25e6c_elex_wannacry
- Size 116KB
- Sample260502-ry63laev8j
- SHA256 fbaf4f5918b9b4bca1af8dea71eec9fe4965cdd38a5ed534403be890ea0f54a7
- MD5 1781b0d22533fd775170708dcad25e6c
- SHA1 320d60f6dfee900b5e8f2c409521d94b31cf08f9
- SHA512 5502fa44fb4fe77520e96acca793ad28e3f8619bea0b884009a031ce89e761c5090684a2a65595478e02db53fd4936a04af500fbaa8c54af4c2bfdf421718b8b
- SSDEEP 768:Qvw9816vhKQLroi4/wQRNrfrunMxVFA3b7glwRjMlfwGxEI5nWAwxt6sDntNiLJN:YEGh0oil2unMxVS3HgdoKjhLJhL
- TLSH T1B9C3C1295FEA0026F1F3D6749AF556DABE36FC5339058E0E019203064D22F16ED96E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-02_1781b0d22533fd775170708dcad25e6c_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-02_1781b0d22533fd775170708dcad25e6c_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_1781b0d22533fd775170708dcad25e6c_elex_wannacry
- Size 116KB
- SHA256 fbaf4f5918b9b4bca1af8dea71eec9fe4965cdd38a5ed534403be890ea0f54a7
- MD5 1781b0d22533fd775170708dcad25e6c
- SHA1 320d60f6dfee900b5e8f2c409521d94b31cf08f9
- SHA512 5502fa44fb4fe77520e96acca793ad28e3f8619bea0b884009a031ce89e761c5090684a2a65595478e02db53fd4936a04af500fbaa8c54af4c2bfdf421718b8b
- SSDEEP 768:Qvw9816vhKQLroi4/wQRNrfrunMxVFA3b7glwRjMlfwGxEI5nWAwxt6sDntNiLJN:YEGh0oil2unMxVS3HgdoKjhLJhL
- TLSH T1B9C3C1295FEA0026F1F3D6749AF556DABE36FC5339058E0E019203064D22F16ED96E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE