General
- Target 2026-06-30_b3a6ecfb293ed8d1fdbfb9ebc3076277_elex_wannacry
- Size 213KB
- Sample260701-dr99sadt8k
- SHA256 e9c1245b1a179c4ca93e51e300ee428f860681a8778039825b842b2e5faa3bac
- MD5 b3a6ecfb293ed8d1fdbfb9ebc3076277
- SHA1 9ef2bf6fc9484af6b50056132e1836df942b3185
- SHA512 2c188f446367e64680de0ebf646b5ce6df00d678d273cea82258af2fe8c5417556c502bc5c173bb6cd533e6cb5795fb062e2ebc6fd3ce3e440dae0f13b0e9387
- SSDEEP 1536:YEGh0o5l2unMxVS3HgdoKjhLJhzrryLPAneS3DquFSS4efk6kF/y+Ic7e/FtPt+A:YEGh0o5lvMUyNjhLJhXrhnJ3D4IF
- TLSH T1D524DB1A3ADE2426D777F1F2DFFAC5ADEB22F6A691130E1F208243035911E915E06D39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_b3a6ecfb293ed8d1fdbfb9ebc3076277_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_b3a6ecfb293ed8d1fdbfb9ebc3076277_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_b3a6ecfb293ed8d1fdbfb9ebc3076277_elex_wannacry
- Size 213KB
- SHA256 e9c1245b1a179c4ca93e51e300ee428f860681a8778039825b842b2e5faa3bac
- MD5 b3a6ecfb293ed8d1fdbfb9ebc3076277
- SHA1 9ef2bf6fc9484af6b50056132e1836df942b3185
- SHA512 2c188f446367e64680de0ebf646b5ce6df00d678d273cea82258af2fe8c5417556c502bc5c173bb6cd533e6cb5795fb062e2ebc6fd3ce3e440dae0f13b0e9387
- SSDEEP 1536:YEGh0o5l2unMxVS3HgdoKjhLJhzrryLPAneS3DquFSS4efk6kF/y+Ic7e/FtPt+A:YEGh0o5lvMUyNjhLJhXrhnJ3D4IF
- TLSH T1D524DB1A3ADE2426D777F1F2DFFAC5ADEB22F6A691130E1F208243035911E915E06D39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE