General
- Target 2026-05-31_f9e3ed45753210cf53c2520222497a0a_elex_wannacry
- Size 92KB
- Sample260531-yw32gsfv21
- SHA256 1b5bf8f2e022e4425d584553f4557e1daf08cd4253365044dceccdf5ab216b24
- MD5 f9e3ed45753210cf53c2520222497a0a
- SHA1 1e73f738df402b315cca6428b912be4d8ad09bdd
- SHA512 6d479f4b684a461e4358c6d1f4492fc1c7739a2d58024839b38e816c571d6c62d3ebb00fc31e3aee0c6aaf14e4399d6b4d8f45e7a601bf1dbcde52b68f54ea77
- SSDEEP 192:1bOzawOs81elJHsc45CcRZOqtShcWaOT2QLrCqw7XY04/CFxyNhoy5t:1bLwOs8AHsc4sMtwhKQLroN4/CFsrd
- TLSH T178933A427A9B78E3EE4011303CEE46F4956EDDDC710DBA9E6A70CB14023E153972A1EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-31_f9e3ed45753210cf53c2520222497a0a_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_f9e3ed45753210cf53c2520222497a0a_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_f9e3ed45753210cf53c2520222497a0a_elex_wannacry
- Size 92KB
- SHA256 1b5bf8f2e022e4425d584553f4557e1daf08cd4253365044dceccdf5ab216b24
- MD5 f9e3ed45753210cf53c2520222497a0a
- SHA1 1e73f738df402b315cca6428b912be4d8ad09bdd
- SHA512 6d479f4b684a461e4358c6d1f4492fc1c7739a2d58024839b38e816c571d6c62d3ebb00fc31e3aee0c6aaf14e4399d6b4d8f45e7a601bf1dbcde52b68f54ea77
- SSDEEP 192:1bOzawOs81elJHsc45CcRZOqtShcWaOT2QLrCqw7XY04/CFxyNhoy5t:1bLwOs8AHsc4sMtwhKQLroN4/CFsrd
- TLSH T178933A427A9B78E3EE4011303CEE46F4956EDDDC710DBA9E6A70CB14023E153972A1EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE