General
- Target 2026-05-04_df6bf6002add9036aaed8ac25029128e_elex_wannacry
- Size 64KB
- Sample260504-tlpc5aft41
- SHA256 5d9bfd164f9f4680e5eac49d3499781c388b0bc6ce04050099c9c2fe3a8e9cf0
- MD5 df6bf6002add9036aaed8ac25029128e
- SHA1 b28458db1f948a1c0ee2782f8b05d1bc1af8ab7d
- SHA512 3ab4e327d40101c53c760370e2c54ec19c8b22fdba4926400d55c6d97678bd62fc0bc616f69c9757f037c26a36bd8f95251d304d74bc0012312aadf8533ebeaa
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwqY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroA4/CFsrdT
- TLSH T12A53514A269544A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-04_df6bf6002add9036aaed8ac25029128e_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_df6bf6002add9036aaed8ac25029128e_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_df6bf6002add9036aaed8ac25029128e_elex_wannacry
- Size 64KB
- SHA256 5d9bfd164f9f4680e5eac49d3499781c388b0bc6ce04050099c9c2fe3a8e9cf0
- MD5 df6bf6002add9036aaed8ac25029128e
- SHA1 b28458db1f948a1c0ee2782f8b05d1bc1af8ab7d
- SHA512 3ab4e327d40101c53c760370e2c54ec19c8b22fdba4926400d55c6d97678bd62fc0bc616f69c9757f037c26a36bd8f95251d304d74bc0012312aadf8533ebeaa
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwqY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroA4/CFsrdT
- TLSH T12A53514A269544A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE