General
- Target 2026-06-29_b4642a4b722c4854791e5cfb842a02f5_elex_wannacry
- Size 80KB
- Sample260630-e9kyaaex3t
- SHA256 f4e6bd31f67467cb56a5f158661c87b105983e447843626bc3b5841ae02fbcac
- MD5 b4642a4b722c4854791e5cfb842a02f5
- SHA1 4c663e62ed5f25e9b7e63599b352f89cdaa999d1
- SHA512 a7de637d474a1e77b61471ec17264917588e48d2862a4fc9293e1d574af2cb63aa7d5b4f6f11fff46f7f4d00bb491579bff71b08955b1ee29e8296c8ed7b8029
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrom4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLrom4/wQRNrfrunMxVFAi
- TLSH T1E483C43E5DDA1037E1B7D6B585F12AE7FE66B98339091D0E46D243428D23B43AC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-29_b4642a4b722c4854791e5cfb842a02f5_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b4642a4b722c4854791e5cfb842a02f5_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b4642a4b722c4854791e5cfb842a02f5_elex_wannacry
- Size 80KB
- SHA256 f4e6bd31f67467cb56a5f158661c87b105983e447843626bc3b5841ae02fbcac
- MD5 b4642a4b722c4854791e5cfb842a02f5
- SHA1 4c663e62ed5f25e9b7e63599b352f89cdaa999d1
- SHA512 a7de637d474a1e77b61471ec17264917588e48d2862a4fc9293e1d574af2cb63aa7d5b4f6f11fff46f7f4d00bb491579bff71b08955b1ee29e8296c8ed7b8029
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrom4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLrom4/wQRNrfrunMxVFAi
- TLSH T1E483C43E5DDA1037E1B7D6B585F12AE7FE66B98339091D0E46D243428D23B43AC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE