General
- Target 2026-05-11_c729113564b2052b48095ab6d52cbdd9_elex_wannacry
- Size 176KB
- Sample260511-rfpqlabz4x
- SHA256 6624d1cdaaaa0cc13fb0be141930338acd60c5ae8848bfaa26e99e2a9ae27ec7
- MD5 c729113564b2052b48095ab6d52cbdd9
- SHA1 a1914d1095277c1506ce943cfd97a3f52e84d526
- SHA512 1f60fa5c6f5b10e9226ed748d28f85e98965e2964c0ff06d22483f2ecf8829d28949634212596f6d8e796569a8cf845f8e5fa4687a18da5ceb1fac5bd757d2d7
- SSDEEP 384:tNbLwOs8AHsc4sMfwhKQLro/o4/CFsrd:tNvw9816vhKQLro/o4/wQ
- TLSH T1E10408834BEE5CF2FA910130087D9AB9926B99C4950EBF9FBF90CD550437292D93A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-11_c729113564b2052b48095ab6d52cbdd9_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_c729113564b2052b48095ab6d52cbdd9_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_c729113564b2052b48095ab6d52cbdd9_elex_wannacry
- Size 176KB
- SHA256 6624d1cdaaaa0cc13fb0be141930338acd60c5ae8848bfaa26e99e2a9ae27ec7
- MD5 c729113564b2052b48095ab6d52cbdd9
- SHA1 a1914d1095277c1506ce943cfd97a3f52e84d526
- SHA512 1f60fa5c6f5b10e9226ed748d28f85e98965e2964c0ff06d22483f2ecf8829d28949634212596f6d8e796569a8cf845f8e5fa4687a18da5ceb1fac5bd757d2d7
- SSDEEP 384:tNbLwOs8AHsc4sMfwhKQLro/o4/CFsrd:tNvw9816vhKQLro/o4/wQ
- TLSH T1E10408834BEE5CF2FA910130087D9AB9926B99C4950EBF9FBF90CD550437292D93A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE