General
- Target 2026-05-09_7b4bc06d41f1d5e5ae4a9e0c7280bdf2_elex_wannacry
- Size 320KB
- Sample260509-mfczksh18n
- SHA256 257c0511a4719d4747cf5509a108be428c5d770092bcfe66af73990abe40ec1a
- MD5 7b4bc06d41f1d5e5ae4a9e0c7280bdf2
- SHA1 548d5c27e116fba1b28813c055abc13d30e2be6b
- SHA512 d60d5be8406149619f46ecb95a8733001b0a813f8eb45b1f74b902b145569ea00c4a0bfbcfd3e4e7a8aec8a4df65003048dfa17fdcc1700db4b0db3a0327c2f9
- SSDEEP 3072:fDEGh0otlZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEGjlnOe2MUVg3vdeKcAEjy
- TLSH T14564A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-09_7b4bc06d41f1d5e5ae4a9e0c7280bdf2_elex_wannacry.exe
Resource
win10v2004-20250619-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-09_7b4bc06d41f1d5e5ae4a9e0c7280bdf2_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-09_7b4bc06d41f1d5e5ae4a9e0c7280bdf2_elex_wannacry
- Size 320KB
- SHA256 257c0511a4719d4747cf5509a108be428c5d770092bcfe66af73990abe40ec1a
- MD5 7b4bc06d41f1d5e5ae4a9e0c7280bdf2
- SHA1 548d5c27e116fba1b28813c055abc13d30e2be6b
- SHA512 d60d5be8406149619f46ecb95a8733001b0a813f8eb45b1f74b902b145569ea00c4a0bfbcfd3e4e7a8aec8a4df65003048dfa17fdcc1700db4b0db3a0327c2f9
- SSDEEP 3072:fDEGh0otlZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEGjlnOe2MUVg3vdeKcAEjy
- TLSH T14564A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE