General
- Target 2026-06-25_bcfbbba9da7fc5f535d90111c4e26299_elex_wannacry
- Size 35KB
- Sample260629-yvy15set41
- SHA256 ce09152e4b5446676ff16939c961f4616db6103ca3d2ffb7aaf5f49cef8b7dbb
- MD5 bcfbbba9da7fc5f535d90111c4e26299
- SHA1 0c07abf6ab66135d787810fd1f58494821c7c933
- SHA512 c6ff122fd77ded7bddad0b62dfa1e25197decbd68440b51efabe73e1960865be0b36d9516b3ff4f368585bc5a0cd7d2831bfda4c07dd49c552600812e5c48e17
- SSDEEP 768:m2VJyePxXbLYTSsrUIZ6kyzrLhRNioPJh1J325p5:m2By9QIZgzrlLioPJTJ
- TLSH T195F2C743F7828842F169E970DBA7D3311237BC82F92862CB77D4FA6D1E325959460B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_bcfbbba9da7fc5f535d90111c4e26299_elex_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_bcfbbba9da7fc5f535d90111c4e26299_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_bcfbbba9da7fc5f535d90111c4e26299_elex_wannacry
- Size 35KB
- SHA256 ce09152e4b5446676ff16939c961f4616db6103ca3d2ffb7aaf5f49cef8b7dbb
- MD5 bcfbbba9da7fc5f535d90111c4e26299
- SHA1 0c07abf6ab66135d787810fd1f58494821c7c933
- SHA512 c6ff122fd77ded7bddad0b62dfa1e25197decbd68440b51efabe73e1960865be0b36d9516b3ff4f368585bc5a0cd7d2831bfda4c07dd49c552600812e5c48e17
- SSDEEP 768:m2VJyePxXbLYTSsrUIZ6kyzrLhRNioPJh1J325p5:m2By9QIZgzrlLioPJTJ
- TLSH T195F2C743F7828842F169E970DBA7D3311237BC82F92862CB77D4FA6D1E325959460B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Modifies visibility of hidden/system files in Explorer
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Winlogon Helper DLL
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
4