General
- Target 2026-06-29_b4dd494172fbb064f996524f39a065cd_elex_wannacry
- Size 50KB
- Sample260630-e8wcmae19p
- SHA256 0b914fb986f01c0d7a1460759103b877e91390756c8d1c5ffec5a21c8b5fee2d
- MD5 b4dd494172fbb064f996524f39a065cd
- SHA1 1355a58c880813954a932ee8d9a7b78cabd451ee
- SHA512 7dfb13cf1bb164701fd335749c435ceaf9c6becc396b361cf1640b7dd110dfe47433b488c63924e90e06eee98ae04a36ad18c9a884038e0c905cf4b76220b480
- SSDEEP 768:OCNxU+Uh5ja9QI73wjbSpoo3e/HckrS2cr2qhSp1CT8PKrY:LNxU+W+73uSpoo3e/8+dcr2ySHCT8P1
- TLSH T14B339F519B56807FFD7056B8188363BE82255D2B214BFD0AE924FD218CEA1D3F9F9213
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-29_b4dd494172fbb064f996524f39a065cd_elex_wannacry.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-06-29_b4dd494172fbb064f996524f39a065cd_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target 2026-06-29_b4dd494172fbb064f996524f39a065cd_elex_wannacry
- Size 50KB
- SHA256 0b914fb986f01c0d7a1460759103b877e91390756c8d1c5ffec5a21c8b5fee2d
- MD5 b4dd494172fbb064f996524f39a065cd
- SHA1 1355a58c880813954a932ee8d9a7b78cabd451ee
- SHA512 7dfb13cf1bb164701fd335749c435ceaf9c6becc396b361cf1640b7dd110dfe47433b488c63924e90e06eee98ae04a36ad18c9a884038e0c905cf4b76220b480
- SSDEEP 768:OCNxU+Uh5ja9QI73wjbSpoo3e/HckrS2cr2qhSp1CT8PKrY:LNxU+W+73uSpoo3e/8+dcr2ySHCT8P1
- TLSH T14B339F519B56807FFD7056B8188363BE82255D2B214BFD0AE924FD218CEA1D3F9F9213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Event Triggered Execution: Image File Execution Options Injection
Adds Run key to start application
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1