General
- Target 2026-05-18_f99efb2847c02196161d31ea68f6eb0c_elex_wannacry
- Size 66KB
- Sample260518-jt3klsht6t
- SHA256 a9dc9bcb12739519299931ac719174e3078fa6c31b0e70129383f57d944e820e
- MD5 f99efb2847c02196161d31ea68f6eb0c
- SHA1 543c164c43795d71de724f17b78e30a8aca3b290
- SHA512 69aa6b43bb4a61bd5f6b77b00f3f0340812c81236c3f0a704ab260d1747ea4908092a664c2b1669eb34d9fe8554d0819eaac0e9241c45317243940b859f875e3
- SSDEEP 384:PbLwOs8AHsc4sMfwhKQLroG4/CFsrdId1qrYs7KdyPIP1P0f:Pvw9816vhKQLroG4/wQWdYUaK+ItI
- TLSH T1E7632A831BD818E3F5861738187586768E77F6D4401EBD6B6B80CE8F086F992D13E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-18_f99efb2847c02196161d31ea68f6eb0c_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-18_f99efb2847c02196161d31ea68f6eb0c_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-18_f99efb2847c02196161d31ea68f6eb0c_elex_wannacry
- Size 66KB
- SHA256 a9dc9bcb12739519299931ac719174e3078fa6c31b0e70129383f57d944e820e
- MD5 f99efb2847c02196161d31ea68f6eb0c
- SHA1 543c164c43795d71de724f17b78e30a8aca3b290
- SHA512 69aa6b43bb4a61bd5f6b77b00f3f0340812c81236c3f0a704ab260d1747ea4908092a664c2b1669eb34d9fe8554d0819eaac0e9241c45317243940b859f875e3
- SSDEEP 384:PbLwOs8AHsc4sMfwhKQLroG4/CFsrdId1qrYs7KdyPIP1P0f:Pvw9816vhKQLroG4/wQWdYUaK+ItI
- TLSH T1E7632A831BD818E3F5861738187586768E77F6D4401EBD6B6B80CE8F086F992D13E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE