General
- Target 2026-07-02_ca6bbf4f9e95e7f49cfba88447869135_elex_wannacry
- Size 633KB
- Sample260702-x8mdtsds71
- SHA256 cce546c2daaaffd52125bfe582242b3eecab3792fc3c80518723245aa03a9409
- MD5 ca6bbf4f9e95e7f49cfba88447869135
- SHA1 13a34b5903a7e2b6a727649590e219a099371303
- SHA512 6953360e579c72e7a02d1a36ea82829b03870ada5c561bb3e9f6efbab0161c146bef250c1cc50e5ae5bb66d064eacd60ba5cb40ba396a79bdd2464d229c99d8f
- SSDEEP 12288:pGruf026ZlmR70Y/k9VS+LWMRUQVOZITSlnIq:Uuf0XoxUS+LTSMOZITSnIq
- TLSH T1D5D44A5539FCC637E2D2A530CE5CBBD0B4A6B998CF310C9332D0591D2E769829716B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_ca6bbf4f9e95e7f49cfba88447869135_elex_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_ca6bbf4f9e95e7f49cfba88447869135_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_ca6bbf4f9e95e7f49cfba88447869135_elex_wannacry
- Size 633KB
- SHA256 cce546c2daaaffd52125bfe582242b3eecab3792fc3c80518723245aa03a9409
- MD5 ca6bbf4f9e95e7f49cfba88447869135
- SHA1 13a34b5903a7e2b6a727649590e219a099371303
- SHA512 6953360e579c72e7a02d1a36ea82829b03870ada5c561bb3e9f6efbab0161c146bef250c1cc50e5ae5bb66d064eacd60ba5cb40ba396a79bdd2464d229c99d8f
- SSDEEP 12288:pGruf026ZlmR70Y/k9VS+LWMRUQVOZITSlnIq:Uuf0XoxUS+LTSMOZITSnIq
- TLSH T1D5D44A5539FCC637E2D2A530CE5CBBD0B4A6B998CF310C9332D0591D2E769829716B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies visibility of file extensions in Explorer
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.