2f607e7d8c7024fe3a7b90f85e94edc27639fa43975ca42b5c11e4ee855b5359

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/05/2026, 17:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-09_b6b47d94904eeeb7650950c7304a42f5_elex_wannacry.exe
Size 192KB
Sample260509-v8rx7set4l
SHA256 2f607e7d8c7024fe3a7b90f85e94edc27639fa43975ca42b5c11e4ee855b5359
MD5 b6b47d94904eeeb7650950c7304a42f5
SHA1 d02f4c5fab97d0b0cc28b4699e7c2f8d8dacfdb9
SHA512 19446f26ef755f37df6f17ac087e0854b558c5198fc2b53099c80b018d521c114a7810ef0ddada463d3af78203843ab7ade82acac09dc69bb15e35636d0e7892
SSDEEP 1536:1QHF/7viwzIpR0NtRNLWzpw5PboEymE6f:CHF/7viwzIpR0NtR0Fw5Pc+E6
TLSH
T1FB148E3FB3921DBEC0E40432265666F22778FD301AB5BA07EF54494A4EF1AEDA530257
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4648	4560	WerFault.exe	84

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-09_b6b47d94904eeeb7650950c7304a42f5_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-09_b6b47d94904eeeb7650950c7304a42f5_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-09_b6b47d94904eeeb7650950c7304a42f5_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4560
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4560 -s 228
  2⤵
  - Program crash
  PID:4648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4560 -ip 4560
1⤵
PID:4604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads