General
- Target 2026-07-01_33df89868aaf3438729500576a56d4ea_elex_wannacry
- Size 54KB
- Sample260701-cae7mscs7k
- SHA256 a36b213d8b75bbc4878be0bd8bdf13c65b077a9364220b923cab8c843ab56068
- MD5 33df89868aaf3438729500576a56d4ea
- SHA1 f652a52593024864a45cfa50cf2d4021af9e7ac9
- SHA512 87289e54dca63410d0cb3f6d85bbe76d15dcba0e560a6fa9cfcd0d1f4a77d0ca8847ff272eddd51d7463060e97c2af87229b1c63fc9855e9c30724768b4be47c
- SSDEEP 1536:LNxU+W+73uSpoo3e/8+dcr2ySHCT89uuud7bOCR4q:PU+W+qNo3e9Sy/H4d4q
- TLSH T1F8439E115BA7807FFD701AB81C87A2FE81156D2B265BED05E524FD2148961E3FCF9213
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-01_33df89868aaf3438729500576a56d4ea_elex_wannacry.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-01_33df89868aaf3438729500576a56d4ea_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target 2026-07-01_33df89868aaf3438729500576a56d4ea_elex_wannacry
- Size 54KB
- SHA256 a36b213d8b75bbc4878be0bd8bdf13c65b077a9364220b923cab8c843ab56068
- MD5 33df89868aaf3438729500576a56d4ea
- SHA1 f652a52593024864a45cfa50cf2d4021af9e7ac9
- SHA512 87289e54dca63410d0cb3f6d85bbe76d15dcba0e560a6fa9cfcd0d1f4a77d0ca8847ff272eddd51d7463060e97c2af87229b1c63fc9855e9c30724768b4be47c
- SSDEEP 1536:LNxU+W+73uSpoo3e/8+dcr2ySHCT89uuud7bOCR4q:PU+W+qNo3e9Sy/H4d4q
- TLSH T1F8439E115BA7807FFD701AB81C87A2FE81156D2B265BED05E524FD2148961E3FCF9213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Event Triggered Execution: Image File Execution Options Injection
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1