General
- Target 2026-05-05_5ce6ef0aa080bc3b0973643409845116_elex_wannacry
- Size 817KB
- Sample260505-ptr2rscs9k
- SHA256 20f7d1bea39125e9497b0daf5e435c8d381c32821bbfc4a8f18245d97d3abdf1
Score
10/10
Malware Config
Targets
-
- Target 2026-05-05_5ce6ef0aa080bc3b0973643409845116_elex_wannacry
- Size 817KB
- SHA256 20f7d1bea39125e9497b0daf5e435c8d381c32821bbfc4a8f18245d97d3abdf1
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Boot or Logon Autostart Execution: Authentication Package
Suspicious Windows Authentication Registry Modification.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Authentication Package
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Authentication Package
1Create or Modify System Process
1Windows Service
1