General
- Target 2026-06-04_b8df9db09e5f63cd38b1e986d5bdd0fb_elex_wannacry
- Size 66KB
- Sample260604-ta4cxaay4m
- SHA256 c59b004803d2ebc254bd2e419908baf9659cd3c92bff5cfdc824b2e8f75166ce
- MD5 b8df9db09e5f63cd38b1e986d5bdd0fb
- SHA1 f9247d062dc3e68a61eefd583905c9cc127f4253
- SHA512 45aa934ba6c531cd0eb58a971f4456b738d6ed100a1f7cc52d901bf372a8e5d91d8b4b07a66b4a974afbd4e5cd2b5ce3c3ade3043f1d7ec4c44747b25421a228
- SSDEEP 384:PbLwOs8AHsc4sMfwhKQLros4/CFsrdId1qrYs7KdyPIP1P0f:Pvw9816vhKQLros4/wQWdYUaK+ItI
- TLSH T1036319831BD818E3F5861738187586768E77F6E4401EBD6B6B80CE8F086E992D13E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-04_b8df9db09e5f63cd38b1e986d5bdd0fb_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_b8df9db09e5f63cd38b1e986d5bdd0fb_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_b8df9db09e5f63cd38b1e986d5bdd0fb_elex_wannacry
- Size 66KB
- SHA256 c59b004803d2ebc254bd2e419908baf9659cd3c92bff5cfdc824b2e8f75166ce
- MD5 b8df9db09e5f63cd38b1e986d5bdd0fb
- SHA1 f9247d062dc3e68a61eefd583905c9cc127f4253
- SHA512 45aa934ba6c531cd0eb58a971f4456b738d6ed100a1f7cc52d901bf372a8e5d91d8b4b07a66b4a974afbd4e5cd2b5ce3c3ade3043f1d7ec4c44747b25421a228
- SSDEEP 384:PbLwOs8AHsc4sMfwhKQLros4/CFsrdId1qrYs7KdyPIP1P0f:Pvw9816vhKQLros4/wQWdYUaK+ItI
- TLSH T1036319831BD818E3F5861738187586768E77F6E4401EBD6B6B80CE8F086E992D13E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE