General

  • Target
    2026-05-29_e8b54f13778e907c5a8646904621a789_elex_hacktools_wannacry
  • Size 739KB
  • Sample260529-2seq9sdv8k
  • SHA256 c3e329c4fe4aadf79d38f37e849f38207e9efa025c9102655df107f177872b40
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: Ammyy Admin

    Remote admin tool with various capabilities.

  • AmmyyAdmin payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-05-29_e8b54f13778e907c5a8646904621a789_elex_hacktools_wannacry
    .exe 739KB

2026-05-29_e8b54f13778e907c5a8646904621a789_elex_hacktools_wannacry

  • IMPHASH 8f0d03b00a1d54a25fbf9a5ad0adec51
  • SHA256 c3e329c4fe4aadf79d38f37e849f38207e9efa025c9102655df107f177872b40
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • AmmyyAdmin payload

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
490622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths