General
- Target 2026-05-27_f404fcc49a132e62049c19b79b5da455_elex_wannacry
- Size 22KB
- Sample260527-jf7bmsgx3q
- SHA256 a2b7cd3130df49a1eb4bcb98b5dee18bcf382e46a7b38955686f376ec0cc98eb
- MD5 f404fcc49a132e62049c19b79b5da455
- SHA1 f0af71d5f2fe84656980e1762f7a4fe2b4c31e39
- SHA512 f797478fd792844410f5db395726e3d246b11a5bf9624b8be228f316bf1f24f3ddea5920fd57dd310b994acc6cb5d94704c22980d62b42933532e7ebc82aeca2
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3GiSrI82aGokquJTd:uxckEEd62J7F3GihoBuJTd
- TLSH T16EA252386FD51E72E3BBD7F285F7D2C6A975B0277A035A1E80850B451823F11ADA0E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-27_f404fcc49a132e62049c19b79b5da455_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_f404fcc49a132e62049c19b79b5da455_elex_wannacry.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_f404fcc49a132e62049c19b79b5da455_elex_wannacry
- Size 22KB
- SHA256 a2b7cd3130df49a1eb4bcb98b5dee18bcf382e46a7b38955686f376ec0cc98eb
- MD5 f404fcc49a132e62049c19b79b5da455
- SHA1 f0af71d5f2fe84656980e1762f7a4fe2b4c31e39
- SHA512 f797478fd792844410f5db395726e3d246b11a5bf9624b8be228f316bf1f24f3ddea5920fd57dd310b994acc6cb5d94704c22980d62b42933532e7ebc82aeca2
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3GiSrI82aGokquJTd:uxckEEd62J7F3GihoBuJTd
- TLSH T16EA252386FD51E72E3BBD7F285F7D2C6A975B0277A035A1E80850B451823F11ADA0E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE