General
- Target 2026-07-01_8b05ecb11fb77125bac7312333af620c_elex_wannacry
- Size 48KB
- Sample260701-k1azlsct91
- SHA256 16039d272c2ca6af5a3872b3374af1526a5cc59065c32411911367ad9c93fd35
- MD5 8b05ecb11fb77125bac7312333af620c
- SHA1 27b1852b1a9ce29c598d21e7c7222b7b5e3bb228
- SHA512 03dbcb2f5ebd79d904ad29a426217bc7f5db1cb11818e5c9800372e65f55a8dbbe9dce51d823fc2cc650330f9e4594b4b6dfa0021768fe6864280b03856cf628
- SSDEEP 768:1TfYLnG3EB0b5ZyqigS5/jASn+n8bOWSH+qjBWzYxZV:BcGRb5Zyu6/jT+8CWw+ej
- TLSH T16D23C04BD2E055B5D1B28972B937AF349221EC070F202B6AF7CDE84EAE7C146961731D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-01_8b05ecb11fb77125bac7312333af620c_elex_wannacry.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-01_8b05ecb11fb77125bac7312333af620c_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target 2026-07-01_8b05ecb11fb77125bac7312333af620c_elex_wannacry
- Size 48KB
- SHA256 16039d272c2ca6af5a3872b3374af1526a5cc59065c32411911367ad9c93fd35
- MD5 8b05ecb11fb77125bac7312333af620c
- SHA1 27b1852b1a9ce29c598d21e7c7222b7b5e3bb228
- SHA512 03dbcb2f5ebd79d904ad29a426217bc7f5db1cb11818e5c9800372e65f55a8dbbe9dce51d823fc2cc650330f9e4594b4b6dfa0021768fe6864280b03856cf628
- SSDEEP 768:1TfYLnG3EB0b5ZyqigS5/jASn+n8bOWSH+qjBWzYxZV:BcGRb5Zyu6/jT+8CWw+ej
- TLSH T16D23C04BD2E055B5D1B28972B937AF349221EC070F202B6AF7CDE84EAE7C146961731D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies firewall policy service
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
3