Overview

overview

10

Static

static

10

2026-05-18...ry.exe

windows10-2004-x64

10

2026-05-18...ry.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-05-18_48fd6cf61df938a31df81bc7861ddffa_elex_wannacry
  • Size 28KB
  • Sample260518-jch5msgz7s
  • SHA256 170f0b9a473a3bf6d002a9daffbf5cc6aee191a447b9e8b68e2162c7f24e51f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
waskidiscoverydownloader

Malware Config

Targets

    • Target
      2026-05-18_48fd6cf61df938a31df81bc7861ddffa_elex_wannacry
    • Size 28KB
    • SHA256 170f0b9a473a3bf6d002a9daffbf5cc6aee191a447b9e8b68e2162c7f24e51f0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverydownloaderwaski

    • Detects Waski payload

    • Family: Waski

      Waski is a trojan downloader written in C++.

      downloaderwaski

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks