General
- Target 2026-06-30_afd4b8b0b6e7d02887cf928617f1078b_elex_wannacry
- Size 157KB
- Sample260701-dve8tadv3j
- SHA256 e286f7730afd7d91880da50ed35f798ff061e8cba24b2650639495a7643f72a6
- MD5 afd4b8b0b6e7d02887cf928617f1078b
- SHA1 c7babd07a7a7809c5b6825609722ed3b19fcb019
- SHA512 c27ed95bd2933cd4466005d11a38b0f4aefed2433924b97d983a0643d9d02cdddb9a1e16094b0b2ddcedbe5c34e958621162fe323a41e73851d8519bf7d2b17b
- SSDEEP 3072:yqLQsKzWl3u7QjrMVERNvUZTRAN4saitRE8peCk2Pki20XW7hxsfw:yq8sK55VmBgRANUoetMkp0mNxs4
- TLSH T19BF31291BC278827EBF698341E2FBEB1D7E7A97205A72567C58084483D74B729D2703C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_afd4b8b0b6e7d02887cf928617f1078b_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
vertexnet
C2
-
www.girlsofipanema.biz
Mutex
-
MOVIESTARTOX32
Attributes
-
C2Path
/vertex/
Targets
-
- Target 2026-06-30_afd4b8b0b6e7d02887cf928617f1078b_elex_wannacry
- Size 157KB
- SHA256 e286f7730afd7d91880da50ed35f798ff061e8cba24b2650639495a7643f72a6
- MD5 afd4b8b0b6e7d02887cf928617f1078b
- SHA1 c7babd07a7a7809c5b6825609722ed3b19fcb019
- SHA512 c27ed95bd2933cd4466005d11a38b0f4aefed2433924b97d983a0643d9d02cdddb9a1e16094b0b2ddcedbe5c34e958621162fe323a41e73851d8519bf7d2b17b
- SSDEEP 3072:yqLQsKzWl3u7QjrMVERNvUZTRAN4saitRE8peCk2Pki20XW7hxsfw:yq8sK55VmBgRANUoetMkp0mNxs4
- TLSH T19BF31291BC278827EBF698341E2FBEB1D7E7A97205A72567C58084483D74B729D2703C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects VertexNET stealer
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext