General
- Target 2026-07-01_51270d63786eba5847aef139335f89a3_elex_wannacry
- Size 56KB
- Sample260701-lvvbqsaz6j
- SHA256 25c3ade2ae3501c32066d7e6e15933f100c0ac7c605be6839f0aec77b6329a7f
- MD5 51270d63786eba5847aef139335f89a3
- SHA1 7e178b8baf830751f5bafe92de5b073899fc6c1d
- SHA512 9e976aac071e3bd49138ec9db660453fbd1584097068ac7119f38ce4ccaef51b71cc506db31c3e3a4de12629236f6a86f2a1f9f16695af94f27862124b9d416b
- SSDEEP 768:swN433nhR5WXPkeKwUQJ8FLDShG6zhYG+j1zVPgpF/ferHXcQKXCh9:sjhR8XPkFiJ8FoGah+j15PgpF/fqsQK
- TLSH T17343E10FA35598F5F9F64274E99B5E778B69FC16CD11E12AE38AFD8D403A0523C2204E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-01_51270d63786eba5847aef139335f89a3_elex_wannacry.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-01_51270d63786eba5847aef139335f89a3_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target 2026-07-01_51270d63786eba5847aef139335f89a3_elex_wannacry
- Size 56KB
- SHA256 25c3ade2ae3501c32066d7e6e15933f100c0ac7c605be6839f0aec77b6329a7f
- MD5 51270d63786eba5847aef139335f89a3
- SHA1 7e178b8baf830751f5bafe92de5b073899fc6c1d
- SHA512 9e976aac071e3bd49138ec9db660453fbd1584097068ac7119f38ce4ccaef51b71cc506db31c3e3a4de12629236f6a86f2a1f9f16695af94f27862124b9d416b
- SSDEEP 768:swN433nhR5WXPkeKwUQJ8FLDShG6zhYG+j1zVPgpF/ferHXcQKXCh9:sjhR8XPkFiJ8FoGah+j15PgpF/fqsQK
- TLSH T17343E10FA35598F5F9F64274E99B5E778B69FC16CD11E12AE38AFD8D403A0523C2204E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies firewall policy service
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
3