General
- Target 2026-05-11_49e6defffd28354df614f7d05d2e95c8_elex_wannacry
- Size 384KB
- Sample260511-ssm8zagx2m
- SHA256 82b170e2eade2ec2cf2665795ec9a5598e92eb8c7c6cd653981528ca36fa5d99
- MD5 49e6defffd28354df614f7d05d2e95c8
- SHA1 243cb00cf7101af8242f78b460c974aeca1dcd71
- SHA512 fb4ab3a5d9f038c0ad6ec7c561c823b2fcaa1cc42c2680c3a1b4c8bc46ac8fb58544a825b0e7899d18960c0d4a61e03177a24e3e568910d36e239cc69c9df5c4
- SSDEEP 6144:9XMjfgqgtL5A5DlyQOVrVZUGPCMCGMcyJG:1MjTqLO4UGPCMCGMcyJG
- TLSH T18F845A567E36FA6AC2F449B0C94588B1A2258E3D2C26B84EFD0E778DB87D3464F10375
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_49e6defffd28354df614f7d05d2e95c8_elex_wannacry.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_49e6defffd28354df614f7d05d2e95c8_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_49e6defffd28354df614f7d05d2e95c8_elex_wannacry
- Size 384KB
- SHA256 82b170e2eade2ec2cf2665795ec9a5598e92eb8c7c6cd653981528ca36fa5d99
- MD5 49e6defffd28354df614f7d05d2e95c8
- SHA1 243cb00cf7101af8242f78b460c974aeca1dcd71
- SHA512 fb4ab3a5d9f038c0ad6ec7c561c823b2fcaa1cc42c2680c3a1b4c8bc46ac8fb58544a825b0e7899d18960c0d4a61e03177a24e3e568910d36e239cc69c9df5c4
- SSDEEP 6144:9XMjfgqgtL5A5DlyQOVrVZUGPCMCGMcyJG:1MjTqLO4UGPCMCGMcyJG
- TLSH T18F845A567E36FA6AC2F449B0C94588B1A2258E3D2C26B84EFD0E778DB87D3464F10375
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.