General
- Target 2026-05-30_a1f83e9fc676a6a2afdf70a40aed3d12_elex_wannacry
- Size 68KB
- Sample260530-ea158ady4v
- SHA256 b6c97a05d8aeea25d2c20437501d63ad47b7794ce3d2f456f4927667cc5eae6a
- MD5 a1f83e9fc676a6a2afdf70a40aed3d12
- SHA1 081a034ac5c6ab9c32160b23b75edd5495eb8d7e
- SHA512 6040c103eba5a9607d07a5035882ed12400f52398ecaa8d9d7c193eb8c4f14a90e31f9a531fef7fe758d161f368354db88888015d292b3dad1ff75fd2739ec9b
- SSDEEP 192:ebOzawOs81elJHsc45UcRZOOtShcWaOT2QLrCqw95Y04/CFxyNhoy5t8:ebLwOs8AHsc4KMlwhKQLro9L4/CFsrd8
- TLSH T15B638163D67BF8E3ED43013C28A856A48317DF80A24D7D769640F4A13E2DF4A9B65C0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-30_a1f83e9fc676a6a2afdf70a40aed3d12_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_a1f83e9fc676a6a2afdf70a40aed3d12_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-30_a1f83e9fc676a6a2afdf70a40aed3d12_elex_wannacry
- Size 68KB
- SHA256 b6c97a05d8aeea25d2c20437501d63ad47b7794ce3d2f456f4927667cc5eae6a
- MD5 a1f83e9fc676a6a2afdf70a40aed3d12
- SHA1 081a034ac5c6ab9c32160b23b75edd5495eb8d7e
- SHA512 6040c103eba5a9607d07a5035882ed12400f52398ecaa8d9d7c193eb8c4f14a90e31f9a531fef7fe758d161f368354db88888015d292b3dad1ff75fd2739ec9b
- SSDEEP 192:ebOzawOs81elJHsc45UcRZOOtShcWaOT2QLrCqw95Y04/CFxyNhoy5t8:ebLwOs8AHsc4KMlwhKQLro9L4/CFsrd8
- TLSH T15B638163D67BF8E3ED43013C28A856A48317DF80A24D7D769640F4A13E2DF4A9B65C0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE