General
- Target 2026-06-04_214cc928c6da946adac0f009a9b0cb20_elex_wannacry
- Size 84KB
- Sample260604-kc8wqsbt7v
- SHA256 4f2aa56436789f42090a72ccd3d0d4da510b98ea3e87d06269d346cc652ee6a6
- MD5 214cc928c6da946adac0f009a9b0cb20
- SHA1 e81d1c939d2c5d103ccbe4b645c964f1e190a256
- SHA512 d1ac85d613152c8edae895c001fcce31c5f56485d0f4d4efd3c7e27e2b36cbc580850e34b8b871fa4e3bb5f5de9fc0c4394532f8db33625e5b76a9e250888e35
- SSDEEP 768:svw9816vhKQLroFL4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oFLllZCJvCJXX0SCJXuev
- TLSH T1D6830A5372DC5CF3F1A613382977AF674D42BB90050A3B525AC08A8F499C9D7DA2C357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-04_214cc928c6da946adac0f009a9b0cb20_elex_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_214cc928c6da946adac0f009a9b0cb20_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_214cc928c6da946adac0f009a9b0cb20_elex_wannacry
- Size 84KB
- SHA256 4f2aa56436789f42090a72ccd3d0d4da510b98ea3e87d06269d346cc652ee6a6
- MD5 214cc928c6da946adac0f009a9b0cb20
- SHA1 e81d1c939d2c5d103ccbe4b645c964f1e190a256
- SHA512 d1ac85d613152c8edae895c001fcce31c5f56485d0f4d4efd3c7e27e2b36cbc580850e34b8b871fa4e3bb5f5de9fc0c4394532f8db33625e5b76a9e250888e35
- SSDEEP 768:svw9816vhKQLroFL4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oFLllZCJvCJXX0SCJXuev
- TLSH T1D6830A5372DC5CF3F1A613382977AF674D42BB90050A3B525AC08A8F499C9D7DA2C357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE