General
- Target 2026-05-22_d6bfa4ce5a6f0438a02eb57baa32178c_elex_wannacry
- Size 64KB
- Sample260522-ccf7qafs2v
- SHA256 a981e0fefe73c73d8026af3758a162eefcd0a4bd501aacdbf02789e1af94c7d9
- MD5 d6bfa4ce5a6f0438a02eb57baa32178c
- SHA1 ff6230d31d29ee3f9a47c135ade622f08a190005
- SHA512 fd0150143dcbb0f971b0099e32f9f5dd596a7ef240c3cac3e9186a21dae74bafa6a69c02d5706e98037ac90a7e34ae491bb8828667ccec5c06e2222370311e33
- SSDEEP 192:ObOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqw9Y04/CFxyNhoy5tF:ObLwOs8AHsc4QMfwhKQLrov4/CFsrdF
- TLSH T195534BF3C69BCAA3F6E0713F07644A745127958853896D9BEB48F91E002BFC1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-22_d6bfa4ce5a6f0438a02eb57baa32178c_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_d6bfa4ce5a6f0438a02eb57baa32178c_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_d6bfa4ce5a6f0438a02eb57baa32178c_elex_wannacry
- Size 64KB
- SHA256 a981e0fefe73c73d8026af3758a162eefcd0a4bd501aacdbf02789e1af94c7d9
- MD5 d6bfa4ce5a6f0438a02eb57baa32178c
- SHA1 ff6230d31d29ee3f9a47c135ade622f08a190005
- SHA512 fd0150143dcbb0f971b0099e32f9f5dd596a7ef240c3cac3e9186a21dae74bafa6a69c02d5706e98037ac90a7e34ae491bb8828667ccec5c06e2222370311e33
- SSDEEP 192:ObOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqw9Y04/CFxyNhoy5tF:ObLwOs8AHsc4QMfwhKQLrov4/CFsrdF
- TLSH T195534BF3C69BCAA3F6E0713F07644A745127958853896D9BEB48F91E002BFC1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE