General
- Target 2026-06-04_818881c2b101342872c029c80c528afc_elex_wannacry
- Size 90KB
- Sample260604-epxfkshx8z
- SHA256 5f2bd443021d8104ebdc935691a3270ca9693c9c1c17a55731c0e5816b8213b4
- MD5 818881c2b101342872c029c80c528afc
- SHA1 c3e80d71392a7332bf8832adbdb2373861f39ac2
- SHA512 c411974f7047a1df6d7d5a7cb1e69f74d4ad1a55ef716ea0aa522a2b00c4f2a765eb088439ecaf2a0fd4757f6265e38ce756a965e8dedb6eb9e1d55866d93134
- SSDEEP 768:Qvw9816vhKQLroE84/wQRNrfrunMxVFA3b7glws:YEGh0oE8l2unMxVS3Hgz
- TLSH T1D193C53D5DDA1037E2B7D6B485F126E3FE66B98335091D0E46D243428D23B53AD86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-04_818881c2b101342872c029c80c528afc_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_818881c2b101342872c029c80c528afc_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_818881c2b101342872c029c80c528afc_elex_wannacry
- Size 90KB
- SHA256 5f2bd443021d8104ebdc935691a3270ca9693c9c1c17a55731c0e5816b8213b4
- MD5 818881c2b101342872c029c80c528afc
- SHA1 c3e80d71392a7332bf8832adbdb2373861f39ac2
- SHA512 c411974f7047a1df6d7d5a7cb1e69f74d4ad1a55ef716ea0aa522a2b00c4f2a765eb088439ecaf2a0fd4757f6265e38ce756a965e8dedb6eb9e1d55866d93134
- SSDEEP 768:Qvw9816vhKQLroE84/wQRNrfrunMxVFA3b7glws:YEGh0oE8l2unMxVS3Hgz
- TLSH T1D193C53D5DDA1037E2B7D6B485F126E3FE66B98335091D0E46D243428D23B53AD86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE