General
- Target 2026-05-11_c68fc315de6ac362d4a2a54d711e03b5_elex_wannacry
- Size 84KB
- Sample260511-rb643sby3s
- SHA256 4fee7c3b9eb6417cf785a6e74403543bb789f90902aaabdc890654c38d452c1d
- MD5 c68fc315de6ac362d4a2a54d711e03b5
- SHA1 de625ee30e2bf0e0a1ab21317e5a384436275285
- SHA512 bdf1eb8aba0c7e987da43c0e852b9ff0dd898c2529f7dd1fa1f3a14a8a1117095c34da735bfa0c657655e7519c12cdc29e2805be79d4bc1d9da10aa411b97917
- SSDEEP 768:svw9816vhKQLroz4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0ozllZCJvCJXX0SCJXuev
- TLSH T1B5830A5372DC5CF3F1A623382977AF674D42BB90050A3B525AC08A8F499D9D7DA2C34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-11_c68fc315de6ac362d4a2a54d711e03b5_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_c68fc315de6ac362d4a2a54d711e03b5_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_c68fc315de6ac362d4a2a54d711e03b5_elex_wannacry
- Size 84KB
- SHA256 4fee7c3b9eb6417cf785a6e74403543bb789f90902aaabdc890654c38d452c1d
- MD5 c68fc315de6ac362d4a2a54d711e03b5
- SHA1 de625ee30e2bf0e0a1ab21317e5a384436275285
- SHA512 bdf1eb8aba0c7e987da43c0e852b9ff0dd898c2529f7dd1fa1f3a14a8a1117095c34da735bfa0c657655e7519c12cdc29e2805be79d4bc1d9da10aa411b97917
- SSDEEP 768:svw9816vhKQLroz4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0ozllZCJvCJXX0SCJXuev
- TLSH T1B5830A5372DC5CF3F1A623382977AF674D42BB90050A3B525AC08A8F499D9D7DA2C34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE