General
- Target 2026-05-29_3088f356df52453f12821aa18a30833d_elex_wannacry
- Size 92KB
- Sample260529-tfstcsf15t
- SHA256 6183f105d6b4d7eb0c887fe6b07829361c06cb140b479fea7016396d47fc0c18
- MD5 3088f356df52453f12821aa18a30833d
- SHA1 45ecdd5604a1d0d911e58f5634ee9b0f5b21edab
- SHA512 cf319a07dc14fc98f32642de17d21563144171cf3556885e860fdcea6d9d94167bb0286bd69aad72b7b76e0357b35188d5c96a1446cda6cfe2692eb5c590f06c
- SSDEEP 192:1bOzawOs81elJHsc45CcRZOqtShcWaOT2QLrCqwoY04/CFxyNhoy5t:1bLwOs8AHsc4sMtwhKQLro24/CFsrd
- TLSH T188933A427A9B78E3EE5011303CEE46F4956EDDDC710D7A9E6A70CB14023E153972A1EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-29_3088f356df52453f12821aa18a30833d_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_3088f356df52453f12821aa18a30833d_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_3088f356df52453f12821aa18a30833d_elex_wannacry
- Size 92KB
- SHA256 6183f105d6b4d7eb0c887fe6b07829361c06cb140b479fea7016396d47fc0c18
- MD5 3088f356df52453f12821aa18a30833d
- SHA1 45ecdd5604a1d0d911e58f5634ee9b0f5b21edab
- SHA512 cf319a07dc14fc98f32642de17d21563144171cf3556885e860fdcea6d9d94167bb0286bd69aad72b7b76e0357b35188d5c96a1446cda6cfe2692eb5c590f06c
- SSDEEP 192:1bOzawOs81elJHsc45CcRZOqtShcWaOT2QLrCqwoY04/CFxyNhoy5t:1bLwOs8AHsc4sMtwhKQLro24/CFsrd
- TLSH T188933A427A9B78E3EE5011303CEE46F4956EDDDC710D7A9E6A70CB14023E153972A1EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE