General
- Target 2026-05-25_4f6e717ca48fee49eef831d98a776fda_elex_wannacry
- Size 66KB
- Sample260525-reqw9sav5n
- SHA256 64ec079e2a396c8ac9c048185dd95f7c651bc08adb8b7ab97c65228c76c22151
- MD5 4f6e717ca48fee49eef831d98a776fda
- SHA1 aae1fddec7fc7eb4ae799849c5fc322ad8a15d22
- SHA512 2b40e6e71fb2a4a9802121aef1b4fc0660ad2815e112ab2ffb89baeff8eb3e709c5e3b1ad3c9cbd8e3b7e1cf3caea6bdf00d7e9798a4aed92e3c221490325b8e
- SSDEEP 384:PbLwOs8AHsc4sMfwhKQLrog4/CFsrdId1qrYs7KdyPIP1P0f:Pvw9816vhKQLrog4/wQWdYUaK+ItI
- TLSH T1776329831BD818E3F5861B38187586768E77F6D4401EBD6B6B80CE8F086F992D13E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-25_4f6e717ca48fee49eef831d98a776fda_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-25_4f6e717ca48fee49eef831d98a776fda_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-25_4f6e717ca48fee49eef831d98a776fda_elex_wannacry
- Size 66KB
- SHA256 64ec079e2a396c8ac9c048185dd95f7c651bc08adb8b7ab97c65228c76c22151
- MD5 4f6e717ca48fee49eef831d98a776fda
- SHA1 aae1fddec7fc7eb4ae799849c5fc322ad8a15d22
- SHA512 2b40e6e71fb2a4a9802121aef1b4fc0660ad2815e112ab2ffb89baeff8eb3e709c5e3b1ad3c9cbd8e3b7e1cf3caea6bdf00d7e9798a4aed92e3c221490325b8e
- SSDEEP 384:PbLwOs8AHsc4sMfwhKQLrog4/CFsrdId1qrYs7KdyPIP1P0f:Pvw9816vhKQLrog4/wQWdYUaK+ItI
- TLSH T1776329831BD818E3F5861B38187586768E77F6D4401EBD6B6B80CE8F086F992D13E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE