General
- Target 2026-06-27_2a60d46e6fd38f8076c4a49b84bd41e6_elex_wannacry
- Size 485KB
- Sample260629-kxtybabt7n
- SHA256 83952347095f642643c59091501cdd5975ccb17a2ae05d84ded38614020eef35
- MD5 2a60d46e6fd38f8076c4a49b84bd41e6
- SHA1 89788e1576710227094ba92bae78a4ca97dab10b
- SHA512 2124ba74d0d5a3e105efa805d0c8fc6d05fea0e4f7e6c3a16ca8ff19f329aa08cb56e791d5e4f51c0d276ab9d2a7e7e9fdadf158bf8414a91b1ddac7defa10a7
- SSDEEP 12288:mAE5LW4N1c3IcMd888888888888W88888888888ETxyt:mv9N1kIcMoTxyt
- TLSH T1AAB4160163978038EBE656F44D6695A13E337CD95DEAA08AEC70F30D0B70AC2D9F5762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_2a60d46e6fd38f8076c4a49b84bd41e6_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_2a60d46e6fd38f8076c4a49b84bd41e6_elex_wannacry.exe
Resource
win11ltsc2024-20260617-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_2a60d46e6fd38f8076c4a49b84bd41e6_elex_wannacry
- Size 485KB
- SHA256 83952347095f642643c59091501cdd5975ccb17a2ae05d84ded38614020eef35
- MD5 2a60d46e6fd38f8076c4a49b84bd41e6
- SHA1 89788e1576710227094ba92bae78a4ca97dab10b
- SHA512 2124ba74d0d5a3e105efa805d0c8fc6d05fea0e4f7e6c3a16ca8ff19f329aa08cb56e791d5e4f51c0d276ab9d2a7e7e9fdadf158bf8414a91b1ddac7defa10a7
- SSDEEP 12288:mAE5LW4N1c3IcMd888888888888W88888888888ETxyt:mv9N1kIcMoTxyt
- TLSH T1AAB4160163978038EBE656F44D6695A13E337CD95DEAA08AEC70F30D0B70AC2D9F5762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.