General
- Target 2026-06-28_24ea64e98b7336e965f32f0691774c27_elex_wannacry
- Size 60KB
- Sample260630-thy36abt8m
- SHA256 b6d5b4c0c2a1402b07a3e837a5708285c7e34b25dc97e35d2adf63c32caabf4f
- MD5 24ea64e98b7336e965f32f0691774c27
- SHA1 5442c9d8603cef387907f7e984817d3a06435a40
- SHA512 00475b0e82b3e2ba9a74c1cf0a3368f81bd4db396eefffd5dcd4b0268c1a1a7396a47ca29e77ea23f53a8e543b0d16bc555895058b698f3f3dfcafd7ba56b8f7
- SSDEEP 192:XbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE/Y04/CFxyNhoy5t:XbLwOs8AHsc4sMfwhKQLroM4/CFsrd
- TLSH T1675309834BDE9CF2F791127118794AB9927B9AC4910EBE9FBF90CD540037692E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-28_24ea64e98b7336e965f32f0691774c27_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_24ea64e98b7336e965f32f0691774c27_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_24ea64e98b7336e965f32f0691774c27_elex_wannacry
- Size 60KB
- SHA256 b6d5b4c0c2a1402b07a3e837a5708285c7e34b25dc97e35d2adf63c32caabf4f
- MD5 24ea64e98b7336e965f32f0691774c27
- SHA1 5442c9d8603cef387907f7e984817d3a06435a40
- SHA512 00475b0e82b3e2ba9a74c1cf0a3368f81bd4db396eefffd5dcd4b0268c1a1a7396a47ca29e77ea23f53a8e543b0d16bc555895058b698f3f3dfcafd7ba56b8f7
- SSDEEP 192:XbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE/Y04/CFxyNhoy5t:XbLwOs8AHsc4sMfwhKQLroM4/CFsrd
- TLSH T1675309834BDE9CF2F791127118794AB9927B9AC4910EBE9FBF90CD540037692E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE