General
- Target 2026-07-01_bef43c2e0a0594d7ce708f4de69c04ab_elex_nitol_wannacry
- Size 51KB
- Sample260701-1192psgx91
- SHA256 9a454823756dd383c50e760a0d9273ad617f66fe677f10e352d5f2c8e87cf3e8
- MD5 bef43c2e0a0594d7ce708f4de69c04ab
- SHA1 cf8b54d263eca361fbe0dd2387919de12ec7e51f
- SHA512 7a96adf0e9efe8554d15819938780d922fc63eaaa26d9d9cc4b15e160226be568f9ecddb6a2c371d8993edad4e927e1e18c2ef42bf52b35fe31e59d2bf9a02a2
- SSDEEP 768:EvQ5qDLHRdw2iPSMEk/6KMvu571xuEMs96cyX1869U2RRRJaaaa3:EvQoLHjw2iWPKMvw71sMLyXuh2RRRJ
- TLSH T166334D679BC18492D67B033854A2B7FA28E37C75490ED056FF80BADA18B5D41FB39903
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_bef43c2e0a0594d7ce708f4de69c04ab_elex_nitol_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_bef43c2e0a0594d7ce708f4de69c04ab_elex_nitol_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_bef43c2e0a0594d7ce708f4de69c04ab_elex_nitol_wannacry
- Size 51KB
- SHA256 9a454823756dd383c50e760a0d9273ad617f66fe677f10e352d5f2c8e87cf3e8
- MD5 bef43c2e0a0594d7ce708f4de69c04ab
- SHA1 cf8b54d263eca361fbe0dd2387919de12ec7e51f
- SHA512 7a96adf0e9efe8554d15819938780d922fc63eaaa26d9d9cc4b15e160226be568f9ecddb6a2c371d8993edad4e927e1e18c2ef42bf52b35fe31e59d2bf9a02a2
- SSDEEP 768:EvQ5qDLHRdw2iPSMEk/6KMvu571xuEMs96cyX1869U2RRRJaaaa3:EvQoLHjw2iWPKMvw71sMLyXuh2RRRJ
- TLSH T166334D679BC18492D67B033854A2B7FA28E37C75490ED056FF80BADA18B5D41FB39903
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.