General
- Target 2026-06-05_8256d2429d1121d95b0c76340c43e0bd_elex_nitol_wannacry
- Size 41KB
- Sample260605-fnfbcaa121
- SHA256 d8122db12c9c353679bc1a2a4691843986b598a0b69bbfea347b76346a88a5ad
- MD5 8256d2429d1121d95b0c76340c43e0bd
- SHA1 437a3be57aefacf3b57572eea2f57a7830a506b1
- SHA512 68e8beae34091f9c297fde60570f5a82c0a5c9283ef468d6dd7fc5ff10664e7adeed654f9abba8921a268dc49a5a873399f18f072fbe2def29f98a19fb98a447
- SSDEEP 768:EvQ5qDLHRdw2iPSMEk/6KMvu571xuEMs96cyX18693Wr:EvQoLHjw2iWPKMvw71sMLyXuhr
- TLSH T190132B579BC1C492D567023458E6B3BB6DA7BC3A4A0ED116FF40FA8E1875902FB39903
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-05_8256d2429d1121d95b0c76340c43e0bd_elex_nitol_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_8256d2429d1121d95b0c76340c43e0bd_elex_nitol_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-05_8256d2429d1121d95b0c76340c43e0bd_elex_nitol_wannacry
- Size 41KB
- SHA256 d8122db12c9c353679bc1a2a4691843986b598a0b69bbfea347b76346a88a5ad
- MD5 8256d2429d1121d95b0c76340c43e0bd
- SHA1 437a3be57aefacf3b57572eea2f57a7830a506b1
- SHA512 68e8beae34091f9c297fde60570f5a82c0a5c9283ef468d6dd7fc5ff10664e7adeed654f9abba8921a268dc49a5a873399f18f072fbe2def29f98a19fb98a447
- SSDEEP 768:EvQ5qDLHRdw2iPSMEk/6KMvu571xuEMs96cyX18693Wr:EvQoLHjw2iWPKMvw71sMLyXuhr
- TLSH T190132B579BC1C492D567023458E6B3BB6DA7BC3A4A0ED116FF40FA8E1875902FB39903
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.