General
- Target 2026-05-05_9b6d969a749abf3c39b4435b3a52c348_elex_wannacry
- Size 64KB
- Sample260505-nera9ady2z
- SHA256 d3daabb87a9d42dac5ba2456c1db1a684198a2169274edab2f250cc89294d9b7
- MD5 9b6d969a749abf3c39b4435b3a52c348
- SHA1 2f74cf66d23c9b358d72a4cf630d4a49375f6aa7
- SHA512 9ef1d029112bdcddd2f96c03e3f1024cd75171be87bbda13db7db74f7f6e4663762b08aa183df60b38f00bc371680ab1327ff256391e4a823a439be42b3764fa
- SSDEEP 384:rbLwOs8AHsc4sMfwhKQLrou4/CFsrdId1q17VT4VZUlRJDb3:rvw9816vhKQLrou4/wQWdYTsTk3
- TLSH T18E533B530BDD1CF2F692223418776B768967AAC4400E7D9BAF80CF8A446A5C3D52E34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-05_9b6d969a749abf3c39b4435b3a52c348_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_9b6d969a749abf3c39b4435b3a52c348_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_9b6d969a749abf3c39b4435b3a52c348_elex_wannacry
- Size 64KB
- SHA256 d3daabb87a9d42dac5ba2456c1db1a684198a2169274edab2f250cc89294d9b7
- MD5 9b6d969a749abf3c39b4435b3a52c348
- SHA1 2f74cf66d23c9b358d72a4cf630d4a49375f6aa7
- SHA512 9ef1d029112bdcddd2f96c03e3f1024cd75171be87bbda13db7db74f7f6e4663762b08aa183df60b38f00bc371680ab1327ff256391e4a823a439be42b3764fa
- SSDEEP 384:rbLwOs8AHsc4sMfwhKQLrou4/CFsrdId1q17VT4VZUlRJDb3:rvw9816vhKQLrou4/wQWdYTsTk3
- TLSH T18E533B530BDD1CF2F692223418776B768967AAC4400E7D9BAF80CF8A446A5C3D52E34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE