General
- Target 2026-07-01_12bb7f0105f4f2407417b19d3a4e32f6_elex_wannacry
- Size 60KB
- Sample260701-s5pybsbt7t
- SHA256 a9b54dcc54cf90ca8fd4ae2a4273c21234cd2eb5b7d0cad220172cf45d746ca2
- MD5 12bb7f0105f4f2407417b19d3a4e32f6
- SHA1 93ab0e488f14073119035deffb6c64d27211add4
- SHA512 b8fd5e468242fd622cdb2305a676c668407dac1f6e5a0f02ad48f8e0b1b2d9f2cd116605bc85c3f26e5f9f85c7cc60082a7904c0d3f0a35cd97f2270e9ae9dd7
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwEaY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroh4/CFsrd
- TLSH T1DB5309834BDE5CF2F791127108798AB9927B9AC4950EBEDFBF90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_12bb7f0105f4f2407417b19d3a4e32f6_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_12bb7f0105f4f2407417b19d3a4e32f6_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_12bb7f0105f4f2407417b19d3a4e32f6_elex_wannacry
- Size 60KB
- SHA256 a9b54dcc54cf90ca8fd4ae2a4273c21234cd2eb5b7d0cad220172cf45d746ca2
- MD5 12bb7f0105f4f2407417b19d3a4e32f6
- SHA1 93ab0e488f14073119035deffb6c64d27211add4
- SHA512 b8fd5e468242fd622cdb2305a676c668407dac1f6e5a0f02ad48f8e0b1b2d9f2cd116605bc85c3f26e5f9f85c7cc60082a7904c0d3f0a35cd97f2270e9ae9dd7
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwEaY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroh4/CFsrd
- TLSH T1DB5309834BDE5CF2F791127108798AB9927B9AC4950EBEDFBF90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE