General
- Target 2026-05-11_28517f211715173c1bbf2f3143438fb7_elex_wannacry
- Size 59KB
- Sample260511-yb2ypahs4x
- SHA256 e7d3c8b20bcfbb8fe4ec9b4ddfcae68b1b8e284f9e6d107f10d2ed3d1ac799a2
- MD5 28517f211715173c1bbf2f3143438fb7
- SHA1 20ac77b4682620975adc1b5f35d7933cb884f7b2
- SHA512 0d5a62d1df9774c472ab0c2f8f26f5e389cf66acda3c76e5680b7b5cd4562801e511b18f238f32c1689b19675846780e47e1a937e2573ce5d4611449bc80a49d
- SSDEEP 192:MbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwBY04/CFxyNhoy5t:MbLwOs8AHsc4sMfwhKQLroz4/CFsrd
- TLSH T14443F7834BEE5CF2F791117108798AB9927B99D4950EBEDFBB90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-11_28517f211715173c1bbf2f3143438fb7_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_28517f211715173c1bbf2f3143438fb7_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_28517f211715173c1bbf2f3143438fb7_elex_wannacry
- Size 59KB
- SHA256 e7d3c8b20bcfbb8fe4ec9b4ddfcae68b1b8e284f9e6d107f10d2ed3d1ac799a2
- MD5 28517f211715173c1bbf2f3143438fb7
- SHA1 20ac77b4682620975adc1b5f35d7933cb884f7b2
- SHA512 0d5a62d1df9774c472ab0c2f8f26f5e389cf66acda3c76e5680b7b5cd4562801e511b18f238f32c1689b19675846780e47e1a937e2573ce5d4611449bc80a49d
- SSDEEP 192:MbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwBY04/CFxyNhoy5t:MbLwOs8AHsc4sMfwhKQLroz4/CFsrd
- TLSH T14443F7834BEE5CF2F791117108798AB9927B99D4950EBEDFBB90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE