General
- Target 2026-06-30_5b9f06288f2cf0fdf31624efaa19a1f5_elex_wannacry
- Size 168KB
- Sample260701-ff8b6aew5r
- SHA256 51618a7b7a189ab4a5e4bd505ebfc0b4e20e8419832b8a0dc036f49523f64400
- MD5 5b9f06288f2cf0fdf31624efaa19a1f5
- SHA1 b24f6f6d87eae955eca3b7b72d1bf87825bcac96
- SHA512 57843c7ca1846aaf7a04fdcb4646135dd8aee9ee517dac3eabda870d3c88b6c1748dd65a4c754d3a5353c0d8b363e896167e57736876bb9ee16875d8e8a7ecb6
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwXUr4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroEr4/CFsrd
- TLSH T102F308834BDE58F3FB911130087D8AB9927B99D4960EBEEF6F90CD250077292D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_5b9f06288f2cf0fdf31624efaa19a1f5_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_5b9f06288f2cf0fdf31624efaa19a1f5_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_5b9f06288f2cf0fdf31624efaa19a1f5_elex_wannacry
- Size 168KB
- SHA256 51618a7b7a189ab4a5e4bd505ebfc0b4e20e8419832b8a0dc036f49523f64400
- MD5 5b9f06288f2cf0fdf31624efaa19a1f5
- SHA1 b24f6f6d87eae955eca3b7b72d1bf87825bcac96
- SHA512 57843c7ca1846aaf7a04fdcb4646135dd8aee9ee517dac3eabda870d3c88b6c1748dd65a4c754d3a5353c0d8b363e896167e57736876bb9ee16875d8e8a7ecb6
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwXUr4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroEr4/CFsrd
- TLSH T102F308834BDE58F3FB911130087D8AB9927B99D4960EBEEF6F90CD250077292D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE