General
- Target 2026-06-04_7e8a6b94764ebe188997ec89c7ec2859_elex_wannacry
- Size 302KB
- Sample260604-c2m2kaas2n
- SHA256 1dd5b8fc5b5d07c51fae42ee7412ac565dba5a939c117a801b6b32b49f41cf56
- MD5 7e8a6b94764ebe188997ec89c7ec2859
- SHA1 ab21efa5f070d25072cc908f90a568453ca0fa78
- SHA512 f6b426353f98165f34c7d8ff1cc88e519b9c458647ca2d3b8aa1e153defee80abf96af13f4c36cc0b5eea63594a09dea74206eb05401759f8c9c369b0cdabbb2
- SSDEEP 6144:eCq6wwZrxOpqa2J0nXeY+5JHAF0MxqahJSEru0zYUWKu+avkm2QidNLNFhD9w:Iwoqa2T55AFbrhJbCxIuTClNFh5w
- TLSH T1C164F05277F982BEE0F257328D527AA1D6F9E73509248D03B7900E0E9FB6641CB19363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_7e8a6b94764ebe188997ec89c7ec2859_elex_wannacry.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_7e8a6b94764ebe188997ec89c7ec2859_elex_wannacry.exe
Resource
win11-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_7e8a6b94764ebe188997ec89c7ec2859_elex_wannacry
- Size 302KB
- SHA256 1dd5b8fc5b5d07c51fae42ee7412ac565dba5a939c117a801b6b32b49f41cf56
- MD5 7e8a6b94764ebe188997ec89c7ec2859
- SHA1 ab21efa5f070d25072cc908f90a568453ca0fa78
- SHA512 f6b426353f98165f34c7d8ff1cc88e519b9c458647ca2d3b8aa1e153defee80abf96af13f4c36cc0b5eea63594a09dea74206eb05401759f8c9c369b0cdabbb2
- SSDEEP 6144:eCq6wwZrxOpqa2J0nXeY+5JHAF0MxqahJSEru0zYUWKu+avkm2QidNLNFhD9w:Iwoqa2T55AFbrhJbCxIuTClNFh5w
- TLSH T1C164F05277F982BEE0F257328D527AA1D6F9E73509248D03B7900E0E9FB6641CB19363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.