General
- Target 2026-05-16_16d4abb9007491f4d496d8fbae60fb39_elex_wannacry
- Size 15KB
- Sample260516-j94gvaby41
- SHA256 f3f9c206be668b893e908385548651afd7c89f1cddd01b43960c109a19df1d35
- MD5 16d4abb9007491f4d496d8fbae60fb39
- SHA1 7b563fa89ec46f396030c35fde661c571fc0bc2e
- SHA512 c1418ec3bed0bb8548cf327ddc8bcfc39b00163c866eb6046f2772d9046b8dca19afe1a266d1209336a6583559b64467328301cb26331a98e456077cd89c64a3
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3k:uTQWckBeEd6ml1pcg7F3GiElpp
- TLSH T11472C6356AD40C73E3BBD3B195FBC1D6A965702F3703593F90882B893D23A119D90A8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-16_16d4abb9007491f4d496d8fbae60fb39_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_16d4abb9007491f4d496d8fbae60fb39_elex_wannacry.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_16d4abb9007491f4d496d8fbae60fb39_elex_wannacry
- Size 15KB
- SHA256 f3f9c206be668b893e908385548651afd7c89f1cddd01b43960c109a19df1d35
- MD5 16d4abb9007491f4d496d8fbae60fb39
- SHA1 7b563fa89ec46f396030c35fde661c571fc0bc2e
- SHA512 c1418ec3bed0bb8548cf327ddc8bcfc39b00163c866eb6046f2772d9046b8dca19afe1a266d1209336a6583559b64467328301cb26331a98e456077cd89c64a3
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3k:uTQWckBeEd6ml1pcg7F3GiElpp
- TLSH T11472C6356AD40C73E3BBD3B195FBC1D6A965702F3703593F90882B893D23A119D90A8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE