General
- Target 2026-07-02_18e805d1b7122045b97daa2a4076de2b_elex_wannacry
- Size 333KB
- Sample260702-hdjbcsbw9j
- SHA256 9ff8a243cc6c17725dc12bb4889c62383a1d67ee756f16dde662b1c0867b918e
- MD5 18e805d1b7122045b97daa2a4076de2b
- SHA1 d242751e98aca88f908e0bfc418bcb3b4844456b
- SHA512 9438121141ede724abc2b2b66677ff957aa3434c2e223f6d02c7b6c40988b25db44c3a2618e7794144acd2200fd14bf7d69df92af4ed059af3035a5cbcf857a4
- SSDEEP 6144:dxEqOEYeH0rXcNdKxrsdrs+nrrrsdbrdrsdhrsdrnrQrswrsdrBrsdrk:X6FXRrCr9nrrrCbrdrChrCrnrQrNrCrt
- TLSH T1347439CFF9C645A6E0878BB1236E4670E4366CB647506BA3D34BFD9754B884920CB2D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_18e805d1b7122045b97daa2a4076de2b_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_18e805d1b7122045b97daa2a4076de2b_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_18e805d1b7122045b97daa2a4076de2b_elex_wannacry
- Size 333KB
- SHA256 9ff8a243cc6c17725dc12bb4889c62383a1d67ee756f16dde662b1c0867b918e
- MD5 18e805d1b7122045b97daa2a4076de2b
- SHA1 d242751e98aca88f908e0bfc418bcb3b4844456b
- SHA512 9438121141ede724abc2b2b66677ff957aa3434c2e223f6d02c7b6c40988b25db44c3a2618e7794144acd2200fd14bf7d69df92af4ed059af3035a5cbcf857a4
- SSDEEP 6144:dxEqOEYeH0rXcNdKxrsdrs+nrrrsdbrdrsdhrsdrnrQrswrsdrBrsdrk:X6FXRrCr9nrrrCbrdrChrCrnrQrNrCrt
- TLSH T1347439CFF9C645A6E0878BB1236E4670E4366CB647506BA3D34BFD9754B884920CB2D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1