General
- Target 2026-06-28_1a53fd95a53d3fd6e8cb009c53cb1428_elex_wannacry
- Size 167KB
- Sample260629-aexalsg14t
- SHA256 557ed80a9db27d31db4718aaa3b41240a5942682d7d2d6df08e0baa05b9f1ccd
- MD5 1a53fd95a53d3fd6e8cb009c53cb1428
- SHA1 1e03bd37a9ce123c27408e8df70260f2f7eb2e17
- SHA512 a6731f525a38ab7d57821dfd44ca11d6024207821932be97053a2c2206894a2dbc7ec1d4dd79458777a935492f8eb43ae8962b5dcb53cf6eaa2df5e4e050ccef
- SSDEEP 192:4/bOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwq0E4/CFxyNhoy5t:4/bLwOs8AHsc4sMfwhKQLroW4/CFsrd
- TLSH T121F308834BEA58F3F791113105798AB9927B99C4910EBEAB6F90CD690077292D93A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-28_1a53fd95a53d3fd6e8cb009c53cb1428_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_1a53fd95a53d3fd6e8cb009c53cb1428_elex_wannacry.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_1a53fd95a53d3fd6e8cb009c53cb1428_elex_wannacry
- Size 167KB
- SHA256 557ed80a9db27d31db4718aaa3b41240a5942682d7d2d6df08e0baa05b9f1ccd
- MD5 1a53fd95a53d3fd6e8cb009c53cb1428
- SHA1 1e03bd37a9ce123c27408e8df70260f2f7eb2e17
- SHA512 a6731f525a38ab7d57821dfd44ca11d6024207821932be97053a2c2206894a2dbc7ec1d4dd79458777a935492f8eb43ae8962b5dcb53cf6eaa2df5e4e050ccef
- SSDEEP 192:4/bOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwq0E4/CFxyNhoy5t:4/bLwOs8AHsc4sMfwhKQLroW4/CFsrd
- TLSH T121F308834BEA58F3F791113105798AB9927B99C4910EBEAB6F90CD690077292D93A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE