stormser | 3c9005daab39171a85a091efdb842b0a327cf2971530726c92539b6902980b85 | Triage™

Login
Reports

Overview

overview

Static

static

2026-05-31...ry.exe

windows11-21h2-x64

5

Resubmissions

31/05/2026, 20:08

260531-ywvecafv2v10

31/05/2026, 19:54

260531-ymvnrafs4y10

31/05/2026, 19:50

260531-ykmkcse17z10

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-31_cfa8931391e6a59b95d7971b93c1fe96_elex_wannacry
Size 79KB
Sample260531-ywvecafv2v
SHA256 3c9005daab39171a85a091efdb842b0a327cf2971530726c92539b6902980b85
MD5 cfa8931391e6a59b95d7971b93c1fe96
SHA1 8c71be8b1b9265af94b0fde4508a24aeebf121bc
SHA512 132638a7501b4bccae18df0e98ac93e58d23f6994b4efc37de6ba1e9b0559da0c04bc4997e0b91839a94041601b1315e2c9fbab8074fb269c291ce0e8194edba
SSDEEP 768:4vw9816vhKQLroB4/wQpWMZ3XOQ69zbjlAAX5e9zz:wEGh0oBloWMZ3izbR9Xwzz
TLSH
T18C834CC38E6C6483FED6297012A8DAA77D3E97C65544B9976F90FC5408A33C1EB3811D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

stormser microsoft discovery persistence phishing privilege_escalation worm

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

2026-05-31_cfa8931391e6a59b95d7971b93c1fe96_elex_wannacry.exe

Resource

win11-20260513-en

windows11-21h2-x64

20 signatures

900 seconds

microsoft discovery persistence phishing privilege_escalation

Malware Config

Targets

- Target
  2026-05-31_cfa8931391e6a59b95d7971b93c1fe96_elex_wannacry
- Size 79KB
- SHA256 3c9005daab39171a85a091efdb842b0a327cf2971530726c92539b6902980b85
- MD5 cfa8931391e6a59b95d7971b93c1fe96
- SHA1 8c71be8b1b9265af94b0fde4508a24aeebf121bc
- SHA512 132638a7501b4bccae18df0e98ac93e58d23f6994b4efc37de6ba1e9b0559da0c04bc4997e0b91839a94041601b1315e2c9fbab8074fb269c291ce0e8194edba
- SSDEEP 768:4vw9816vhKQLroB4/wQpWMZ3XOQ69zbjlAAX5e9zz:wEGh0oBloWMZ3izbR9Xwzz
- TLSH
  T18C834CC38E6C6483FED6297012A8DAA77D3E97C65544B9976F90FC5408A33C1EB3811D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

microsoft discovery persistence phishing privilege_escalation
- Detected potential entity reuse from brand MICROSOFT.
  phishing microsoft
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftdiscoverypersistencephishingprivilege_escalation

© 2018-2026

Terms | Privacy