General
- Target 2026-06-27_ab5eb3d768a25c0a76987d79e9ef5bf1_elex_wannacry
- Size 20KB
- Sample260629-em2yaadz2n
- SHA256 69c04eebcdf3e710950975125ab45299aa07200ea40688599eec18a5ad550ba4
- MD5 ab5eb3d768a25c0a76987d79e9ef5bf1
- SHA1 03f26f423421ecaea17ba4da540538eeab82022e
- SHA512 6c6cee15449b5948473219194ce3bed5b34ccd47a65fe2c4c5ec93cce0516b66d2a6c6b7cca1fc140ddc2af3d8702f19b1438d1bbd3a234da65f2c0910a0a2cb
- SSDEEP 384:6YRpfgBcDZG3snl1YgToFYs7KdyPIP1v0o7:6YfoKSs71TXaK+ItF
- TLSH T1E9A25AA23FF80DE1D3BB8F38193392968D7970216817691DD580A1CF8D6F582CA6C792
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_ab5eb3d768a25c0a76987d79e9ef5bf1_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_ab5eb3d768a25c0a76987d79e9ef5bf1_elex_wannacry.exe
Resource
win11ltsc2024-20260618-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_ab5eb3d768a25c0a76987d79e9ef5bf1_elex_wannacry
- Size 20KB
- SHA256 69c04eebcdf3e710950975125ab45299aa07200ea40688599eec18a5ad550ba4
- MD5 ab5eb3d768a25c0a76987d79e9ef5bf1
- SHA1 03f26f423421ecaea17ba4da540538eeab82022e
- SHA512 6c6cee15449b5948473219194ce3bed5b34ccd47a65fe2c4c5ec93cce0516b66d2a6c6b7cca1fc140ddc2af3d8702f19b1438d1bbd3a234da65f2c0910a0a2cb
- SSDEEP 384:6YRpfgBcDZG3snl1YgToFYs7KdyPIP1v0o7:6YfoKSs71TXaK+ItF
- TLSH T1E9A25AA23FF80DE1D3BB8F38193392968D7970216817691DD580A1CF8D6F582CA6C792
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.