Analysis
- max time kernel
148s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 02:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
General
- Target 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe
- Size 984KB
- Sample260702-cf2mtsaz3z
- SHA256 99c7dbd0a9c984dbf4b8835d96ec44e60bd1da3a00d06f221badfa62d06892e1
- MD5 e75d246c4a5e22d714509d56d5ae1fe8
- SHA1 75a6c3a1f5758329b82ec0b5792391e35f27d9ea
- SHA512 5ec10d518ef6efd66a33ff18e39d0e04c1505b670fdb88b11bd95ca88e14d2dadcef90002056c7a907bc72952a402420651216baa5925b3daa4437b0a01be6c5
- SSDEEP 3072:AfKPw/6Nb8l4tYpDzo83H6JrgboTlyMvXOqms0itTBf28Vm:oKP9NC4t8zErgsTlXvXBmJitTBe8Vm
- TLSH T19E25083D54E88DB2C0E56C3CF189D2F993EAE49C4B025CE7671A8C3D86B0456A3691DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description flow ioc pid Process Destination IP 2 34.41.139.193 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe - Suspicious behavior: EnumeratesProcesses 48 IoCs
pid Process 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe 8 2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-02_e75d246c4a5e22d714509d56d5ae1fe8_elex_unruy_wannacry.exe"1⤵
- Unexpected DNS network traffic destination
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:8