General
- Target 2026-06-02_2098397e8319b9a408344702fbd20d95_elex_wannacry
- Size 38KB
- Sample260602-arablsbs5p
- SHA256 d207b8830ef6dd52e334db318552e751eac83412e178922bb0e40504dfcf51f4
- MD5 2098397e8319b9a408344702fbd20d95
- SHA1 5fc4467102284e088359f14d0e3259efa159d7ba
- SHA512 d36dcc419a81b061daa2cfec997a09e33f17d64a9de43754d58e9203a0f37ea76b3b8baa6a60f4978acdf7cfc091191860add62b1b8c8a49e31ccc5320326a0d
- SSDEEP 768:fZjIoksdZlOvrA9DvsLKDrnuIeQTls5SQ48NPKQHDFw/Bh2+aBrr:RjwsdXOvrA9DvsLKfuIbBskQ4nsFwSrr
- TLSH T1F7038D06BA41D123C28A84B0D03D67F58C3DEC7A8522249BD7747E2A387CD729962F6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_2098397e8319b9a408344702fbd20d95_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_2098397e8319b9a408344702fbd20d95_elex_wannacry.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_2098397e8319b9a408344702fbd20d95_elex_wannacry
- Size 38KB
- SHA256 d207b8830ef6dd52e334db318552e751eac83412e178922bb0e40504dfcf51f4
- MD5 2098397e8319b9a408344702fbd20d95
- SHA1 5fc4467102284e088359f14d0e3259efa159d7ba
- SHA512 d36dcc419a81b061daa2cfec997a09e33f17d64a9de43754d58e9203a0f37ea76b3b8baa6a60f4978acdf7cfc091191860add62b1b8c8a49e31ccc5320326a0d
- SSDEEP 768:fZjIoksdZlOvrA9DvsLKDrnuIeQTls5SQ48NPKQHDFw/Bh2+aBrr:RjwsdXOvrA9DvsLKfuIbBskQ4nsFwSrr
- TLSH T1F7038D06BA41D123C28A84B0D03D67F58C3DEC7A8522249BD7747E2A387CD729962F6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1