General
- Target 2026-06-27_cd1fddd194d32fa40a22aef7eb7b33ea_elex_wannacry
- Size 64KB
- Sample260629-datwgacx3k
- SHA256 def37d8cb97e780f57a4515e6d44c482e7f5c7690f00236437379882e7633b65
- MD5 cd1fddd194d32fa40a22aef7eb7b33ea
- SHA1 0e81c48e64c47264c1ebbe1e3f5165f6c0fad8cf
- SHA512 9ad3eeb1802db1e63d77f4e19d8622f88c400d942afa3fa4dd19644c3b9fabbae96e0f442c027362984567b4ee4110082b53903c8feb7e5649421dad3009da3d
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroL34/CFsrdn0A9lsy4:vvw9816vhKQLroL34/wQH9lsl
- TLSH T118535C834BEE98F2F7D21131056D8AB98277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-27_cd1fddd194d32fa40a22aef7eb7b33ea_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_cd1fddd194d32fa40a22aef7eb7b33ea_elex_wannacry.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_cd1fddd194d32fa40a22aef7eb7b33ea_elex_wannacry
- Size 64KB
- SHA256 def37d8cb97e780f57a4515e6d44c482e7f5c7690f00236437379882e7633b65
- MD5 cd1fddd194d32fa40a22aef7eb7b33ea
- SHA1 0e81c48e64c47264c1ebbe1e3f5165f6c0fad8cf
- SHA512 9ad3eeb1802db1e63d77f4e19d8622f88c400d942afa3fa4dd19644c3b9fabbae96e0f442c027362984567b4ee4110082b53903c8feb7e5649421dad3009da3d
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroL34/CFsrdn0A9lsy4:vvw9816vhKQLroL34/wQH9lsl
- TLSH T118535C834BEE98F2F7D21131056D8AB98277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE