General
- Target 2026-06-28_cc8d12e9b681d17f3ceac64d0ce12b26_elex_wannacry
- Size 92KB
- Sample260628-xpymracx8j
- SHA256 9e4fb2a2a13b647820d103a2121dbefb2509831adb5b6d95d5d97b85dd0ebf9d
- MD5 cc8d12e9b681d17f3ceac64d0ce12b26
- SHA1 a4764f6166d5b8ba5cb121c9aeea53ec8b68a32f
- SHA512 ef07b88ac9fcc9ac46f29df23a290efbfc6f5e7ba5c1c88418a713308bebec6bb72b37aac1b0d4e2ac480e0b581396db31a56ae5295847b5601b753ac15ad530
- SSDEEP 192:ubizawOs81elJHsc45sTcRZOgtShcWaOT2QLrCqw/Y04/CFxyNhoy5tP:ubHwOs8AHsc4KMfwhKQLrox4/CFsrdP
- TLSH T1EF934FC2065E67E2EDCCFDFC2CD445B481DADD88720979579640CE23C3AA942A73E1A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-28_cc8d12e9b681d17f3ceac64d0ce12b26_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_cc8d12e9b681d17f3ceac64d0ce12b26_elex_wannacry.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_cc8d12e9b681d17f3ceac64d0ce12b26_elex_wannacry
- Size 92KB
- SHA256 9e4fb2a2a13b647820d103a2121dbefb2509831adb5b6d95d5d97b85dd0ebf9d
- MD5 cc8d12e9b681d17f3ceac64d0ce12b26
- SHA1 a4764f6166d5b8ba5cb121c9aeea53ec8b68a32f
- SHA512 ef07b88ac9fcc9ac46f29df23a290efbfc6f5e7ba5c1c88418a713308bebec6bb72b37aac1b0d4e2ac480e0b581396db31a56ae5295847b5601b753ac15ad530
- SSDEEP 192:ubizawOs81elJHsc45sTcRZOgtShcWaOT2QLrCqw/Y04/CFxyNhoy5tP:ubHwOs8AHsc4KMfwhKQLrox4/CFsrdP
- TLSH T1EF934FC2065E67E2EDCCFDFC2CD445B481DADD88720979579640CE23C3AA942A73E1A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE