General
- Target 2026-05-16_a390aa1d8ea89f319b0a581fc28ceefb_elex_wannacry
- Size 382KB
- Sample260516-eblf6aax4v
- SHA256 4885c8bfc5eaef0caad9519e7b4b450c3d36060f5337e691e5363dfb756391db
- MD5 a390aa1d8ea89f319b0a581fc28ceefb
- SHA1 25e2dcc39002e83473212be23c4427907e3357b7
- SHA512 7c723a60dea8f3980e5744268a2dc796a2c902ccf1f6cf62d5c038b9beea5af3526e952fba4587767b224a9f16c937fab0dc0eda3724c25e0e4d79354a3b0fbd
- SSDEEP 3072:63ZrDrwnn1EO7FQFLM5VhiY5unq4fTq/XmvdN4Pqy5K5c226oJdzbL0jPKlgDQk2:sUuYIgmH2e1NgeiJdzsjSlNkc1R7
- TLSH T100848C3D32A38D5FCA9D5970AFDA4BAC3B523C759D14786D604037ED4932378EA0CA68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-16_a390aa1d8ea89f319b0a581fc28ceefb_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_a390aa1d8ea89f319b0a581fc28ceefb_elex_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_a390aa1d8ea89f319b0a581fc28ceefb_elex_wannacry
- Size 382KB
- SHA256 4885c8bfc5eaef0caad9519e7b4b450c3d36060f5337e691e5363dfb756391db
- MD5 a390aa1d8ea89f319b0a581fc28ceefb
- SHA1 25e2dcc39002e83473212be23c4427907e3357b7
- SHA512 7c723a60dea8f3980e5744268a2dc796a2c902ccf1f6cf62d5c038b9beea5af3526e952fba4587767b224a9f16c937fab0dc0eda3724c25e0e4d79354a3b0fbd
- SSDEEP 3072:63ZrDrwnn1EO7FQFLM5VhiY5unq4fTq/XmvdN4Pqy5K5c226oJdzbL0jPKlgDQk2:sUuYIgmH2e1NgeiJdzsjSlNkc1R7
- TLSH T100848C3D32A38D5FCA9D5970AFDA4BAC3B523C759D14786D604037ED4932378EA0CA68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.