General
- Target 2026-05-31_947aad64b7cc3735d15271aa93aa03c9_elex_wannacry
- Size 64KB
- Sample260531-th4nmsb18t
- SHA256 a5b7b4691fefcb2a85a2aff09292de45cf194f08b2347357cf81feed4f320971
- MD5 947aad64b7cc3735d15271aa93aa03c9
- SHA1 83163b6e0824ed9426b1472758a3216d78b61b3e
- SHA512 83abf6ab1a8ac36a646609fc9cf85fd9f02c820d9e112352e5cbeb51cc7d4f036be907225c2c12b9675fd059a09262e9b2a956b620b3583bce1949b753120ee9
- SSDEEP 384:rbLwOs8AHsc4sMfwhKQLroG4/CFsrdId1q17VT4VZUlRJDb3:rvw9816vhKQLroG4/wQWdYTsTk3
- TLSH T17E533B530BDD1CF2F692123414776B768967BAC4410E7D9BAF80CF8E446A583D52E34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-31_947aad64b7cc3735d15271aa93aa03c9_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_947aad64b7cc3735d15271aa93aa03c9_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_947aad64b7cc3735d15271aa93aa03c9_elex_wannacry
- Size 64KB
- SHA256 a5b7b4691fefcb2a85a2aff09292de45cf194f08b2347357cf81feed4f320971
- MD5 947aad64b7cc3735d15271aa93aa03c9
- SHA1 83163b6e0824ed9426b1472758a3216d78b61b3e
- SHA512 83abf6ab1a8ac36a646609fc9cf85fd9f02c820d9e112352e5cbeb51cc7d4f036be907225c2c12b9675fd059a09262e9b2a956b620b3583bce1949b753120ee9
- SSDEEP 384:rbLwOs8AHsc4sMfwhKQLroG4/CFsrdId1q17VT4VZUlRJDb3:rvw9816vhKQLroG4/wQWdYTsTk3
- TLSH T17E533B530BDD1CF2F692123414776B768967BAC4410E7D9BAF80CF8E446A583D52E34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE