General
- Target 2026-06-25_ff6fa3a8c6738643a51cd556b58b0bbd_elex_wannacry
- Size 80KB
- Sample260629-xdbc3sd12r
- SHA256 62bc25628b8de1e0728d4354ff4407c8b6d7383fa9af24c45cd43a2b5c849922
- MD5 ff6fa3a8c6738643a51cd556b58b0bbd
- SHA1 db41fa988a3224956389a3001649afcc71b8894a
- SHA512 dab8205ad9ce80b4e0e94a0e85c69f0542b5c05d25fa3be4b0b87a691c14d8b90e013e983616f042deb3662e1fb016c67a7e23434576d9bef933205bad02f6a4
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroO4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroO4/wQRNrfrunMxVFAi
- TLSH T1D183C43E5DDA1037E1B3D6B585F12AE7FE66B98339091D0E46D243528D23B43AC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-25_ff6fa3a8c6738643a51cd556b58b0bbd_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_ff6fa3a8c6738643a51cd556b58b0bbd_elex_wannacry.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_ff6fa3a8c6738643a51cd556b58b0bbd_elex_wannacry
- Size 80KB
- SHA256 62bc25628b8de1e0728d4354ff4407c8b6d7383fa9af24c45cd43a2b5c849922
- MD5 ff6fa3a8c6738643a51cd556b58b0bbd
- SHA1 db41fa988a3224956389a3001649afcc71b8894a
- SHA512 dab8205ad9ce80b4e0e94a0e85c69f0542b5c05d25fa3be4b0b87a691c14d8b90e013e983616f042deb3662e1fb016c67a7e23434576d9bef933205bad02f6a4
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroO4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroO4/wQRNrfrunMxVFAi
- TLSH T1D183C43E5DDA1037E1B3D6B585F12AE7FE66B98339091D0E46D243528D23B43AC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE