General
- Target 2026-05-19_b193a44ecf6129d4194c474396333d4c_elex_wannacry
- Size 368KB
- Sample260519-ry8w7ae191
- SHA256 a9ce8a88b9794f28a2dbce1b31201681c218809f6b5eb26e0607c17109e3df4c
- MD5 b193a44ecf6129d4194c474396333d4c
- SHA1 28d6495c399ae8af64c0ce933f3cec9e99c3cd0f
- SHA512 2ff28624cd8cfe62d38ba79d3f68354961bb2ddfbddbd4d784641928c99e2efe0d3a5a9a3a0d4899da9a63f53abf0ddfbe43102832d41183548a77bd24c4cdc4
- SSDEEP 192:AIbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwOY04/CFxyNhoy5t:AIbLwOs8AHsc4sMfwhKQLro04/CFsrd
- TLSH T14084F8834BEE5CF2FA911171087D4AB9927BD9C4910EBEDFBB50CD150037292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-19_b193a44ecf6129d4194c474396333d4c_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-19_b193a44ecf6129d4194c474396333d4c_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-19_b193a44ecf6129d4194c474396333d4c_elex_wannacry
- Size 368KB
- SHA256 a9ce8a88b9794f28a2dbce1b31201681c218809f6b5eb26e0607c17109e3df4c
- MD5 b193a44ecf6129d4194c474396333d4c
- SHA1 28d6495c399ae8af64c0ce933f3cec9e99c3cd0f
- SHA512 2ff28624cd8cfe62d38ba79d3f68354961bb2ddfbddbd4d784641928c99e2efe0d3a5a9a3a0d4899da9a63f53abf0ddfbe43102832d41183548a77bd24c4cdc4
- SSDEEP 192:AIbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwOY04/CFxyNhoy5t:AIbLwOs8AHsc4sMfwhKQLro04/CFsrd
- TLSH T14084F8834BEE5CF2FA911171087D4AB9927BD9C4910EBEDFBB50CD150037292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE