General
- Target 2026-05-04_3dbad9709be1853f7ecad824c4bee224_elex_wannacry
- Size 68KB
- Sample260504-d43epsbx3s
- SHA256 87ef9473d44f8dc0af561122e63e9d317fbd1ff361ee5828232bd02d2b988838
- MD5 3dbad9709be1853f7ecad824c4bee224
- SHA1 855d0cd16f62bb7f69653f3dcfc5a1dbe804b974
- SHA512 5836b44286df4bb1c32d93bba77f74c47919e60463129372c69adc894ed97c1b563b5a678744cc4b97eb3047a0b6f6fc619ac02b0c505aee7d9a99bc65ce756e
- SSDEEP 192:ebOzawOs81elJHsc45CcRZOTShcWaOT2QLrCqwmY04/CFxyNhoy5t:ebLwOs8AHsc4sMZhKQLroM4/CFsrd
- TLSH T1456371C3CA995CE2F791B13034684EB59D6B99C6720DBBDA6B70CD1F0037152F72A12A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-04_3dbad9709be1853f7ecad824c4bee224_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_3dbad9709be1853f7ecad824c4bee224_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_3dbad9709be1853f7ecad824c4bee224_elex_wannacry
- Size 68KB
- SHA256 87ef9473d44f8dc0af561122e63e9d317fbd1ff361ee5828232bd02d2b988838
- MD5 3dbad9709be1853f7ecad824c4bee224
- SHA1 855d0cd16f62bb7f69653f3dcfc5a1dbe804b974
- SHA512 5836b44286df4bb1c32d93bba77f74c47919e60463129372c69adc894ed97c1b563b5a678744cc4b97eb3047a0b6f6fc619ac02b0c505aee7d9a99bc65ce756e
- SSDEEP 192:ebOzawOs81elJHsc45CcRZOTShcWaOT2QLrCqwmY04/CFxyNhoy5t:ebLwOs8AHsc4sMZhKQLroM4/CFsrd
- TLSH T1456371C3CA995CE2F791B13034684EB59D6B99C6720DBBDA6B70CD1F0037152F72A12A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE