General
- Target 2026-07-01_48b4421ff4967a17afa5cbdda2f2a39c_elex_wannacry
- Size 48KB
- Sample260701-191vdsft6p
- SHA256 4019bd9de3d2fae98c1f13da2b780a0427cec6554c3f73f97959bf7271326cca
- MD5 48b4421ff4967a17afa5cbdda2f2a39c
- SHA1 d90c906714d1ebf04436146854aa3582d640e334
- SHA512 af5da88267c063b464a87279eaadaf5153afd7da68d834458a7301f520d3e07941fdedd7e1c57e206b4584936fe0903fd20a942cf6783c7ad6b1e5c394a2edeb
- SSDEEP 768:aTdZuu1Ao2J29ng+nqVshjKrVFRoPKDk53Rx7tfk1FuLV:CSgAo2Q9g4oshjqLbMxeuh
- TLSH T1BD23F743AE4B8095E201A6B0456D327DCB73797A0760D77B1784DD3C6837182FC3AAAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_48b4421ff4967a17afa5cbdda2f2a39c_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_48b4421ff4967a17afa5cbdda2f2a39c_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_48b4421ff4967a17afa5cbdda2f2a39c_elex_wannacry
- Size 48KB
- SHA256 4019bd9de3d2fae98c1f13da2b780a0427cec6554c3f73f97959bf7271326cca
- MD5 48b4421ff4967a17afa5cbdda2f2a39c
- SHA1 d90c906714d1ebf04436146854aa3582d640e334
- SHA512 af5da88267c063b464a87279eaadaf5153afd7da68d834458a7301f520d3e07941fdedd7e1c57e206b4584936fe0903fd20a942cf6783c7ad6b1e5c394a2edeb
- SSDEEP 768:aTdZuu1Ao2J29ng+nqVshjKrVFRoPKDk53Rx7tfk1FuLV:CSgAo2Q9g4oshjqLbMxeuh
- TLSH T1BD23F743AE4B8095E201A6B0456D327DCB73797A0760D77B1784DD3C6837182FC3AAAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1