General
- Target 2026-06-30_949842e329220c7c8a8586a4d2e03d5e_elex_wannacry
- Size 92KB
- Sample260701-ebsv8sfw8w
- SHA256 060627ca2587ac61e332aadb795a63904b3192a97e7344a08a32897734a1e282
- MD5 949842e329220c7c8a8586a4d2e03d5e
- SHA1 98e9d4159a84f66e921ac1f049f9d47593a29521
- SHA512 c2f03e6e109c110681f9fa6382e1d8f23b3399f76aab6baa2625d08fa3cddfca533439ed8d4d38e2df146af8f8cf52a1c85d0c6b0e0c641db920aed9511d40c3
- SSDEEP 192:ubOzawOs81elJHsc45CcRZOqtShcWaOT2QLrCqwDY04/CFxyNhoy5tH:ubLwOs8AHsc4sMtwhKQLroF4/CFsrdH
- TLSH T1FA933A427A9B78E3EE4011303CEE46F4956EDDDC710DBA9E6A70CB14023E153972A1EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_949842e329220c7c8a8586a4d2e03d5e_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_949842e329220c7c8a8586a4d2e03d5e_elex_wannacry.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_949842e329220c7c8a8586a4d2e03d5e_elex_wannacry
- Size 92KB
- SHA256 060627ca2587ac61e332aadb795a63904b3192a97e7344a08a32897734a1e282
- MD5 949842e329220c7c8a8586a4d2e03d5e
- SHA1 98e9d4159a84f66e921ac1f049f9d47593a29521
- SHA512 c2f03e6e109c110681f9fa6382e1d8f23b3399f76aab6baa2625d08fa3cddfca533439ed8d4d38e2df146af8f8cf52a1c85d0c6b0e0c641db920aed9511d40c3
- SSDEEP 192:ubOzawOs81elJHsc45CcRZOqtShcWaOT2QLrCqwDY04/CFxyNhoy5tH:ubLwOs8AHsc4sMtwhKQLroF4/CFsrdH
- TLSH T1FA933A427A9B78E3EE4011303CEE46F4956EDDDC710DBA9E6A70CB14023E153972A1EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE