General
- Target 2026-05-16_ddfa1682de94556ba8a65ce06a632790_elex_wannacry
- Size 91KB
- Sample260516-rye9waez61
- SHA256 0a554eba3a2f0b26098a5e4c9ab0c5acf5d6ac5bf691019925edb43ad8b6775c
- MD5 ddfa1682de94556ba8a65ce06a632790
- SHA1 114d53f4fbd5b65170d50454b33dc532116bb33c
- SHA512 712bbdcb0126823aa7ed87bb5b95bda02b77f7534c392a1840baf5e3f5d703aface9490eb1eeac6f24fbb3c69bb1acabfa31504fdd10c4a1c78677bdef9aa1c6
- SSDEEP 768:Qvw9816vhKQLroo4/wQRNrfrunMxVFA3b7glw2:YEGh0ool2unMxVS3Hgx
- TLSH T1E193D63D5EDA103BE2B7D6B585F126E3FE66B9833A095D0E05C243428C23B53AD86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-16_ddfa1682de94556ba8a65ce06a632790_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_ddfa1682de94556ba8a65ce06a632790_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_ddfa1682de94556ba8a65ce06a632790_elex_wannacry
- Size 91KB
- SHA256 0a554eba3a2f0b26098a5e4c9ab0c5acf5d6ac5bf691019925edb43ad8b6775c
- MD5 ddfa1682de94556ba8a65ce06a632790
- SHA1 114d53f4fbd5b65170d50454b33dc532116bb33c
- SHA512 712bbdcb0126823aa7ed87bb5b95bda02b77f7534c392a1840baf5e3f5d703aface9490eb1eeac6f24fbb3c69bb1acabfa31504fdd10c4a1c78677bdef9aa1c6
- SSDEEP 768:Qvw9816vhKQLroo4/wQRNrfrunMxVFA3b7glw2:YEGh0ool2unMxVS3Hgx
- TLSH T1E193D63D5EDA103BE2B7D6B585F126E3FE66B9833A095D0E05C243428C23B53AD86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE