General
- Target 2026-07-02_f4f23309f4172d17b74c6b0eb29aee1c_elex_wannacry
- Size 512KB
- Sample260702-xslscshx2k
- SHA256 f3d09ea0b2578216775d2079db0b0d42687565a5d4847bd7ddc9ae9904f92aaf
- MD5 f4f23309f4172d17b74c6b0eb29aee1c
- SHA1 acbe11f86213ea840751d39016e93a34f1191893
- SHA512 f5e21a3a0e67b93dec4d9f8c1623c83d10e0092f88c9c289a2898bdc77dfec513c03c9a4e05c7db8c9fd8ab3fa223b16b263efdadb4c59e47b6297869ac03a3b
- SSDEEP 6144:MD3IUIeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBXApAX:M7IURuf026ZlmR70Y/k9VS+LPMRWR5Q
- TLSH T1B7B43A0639FCC73BE3D25530CE6DFB90B0F5B9688F21489736D4291D2A76982E316A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_f4f23309f4172d17b74c6b0eb29aee1c_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_f4f23309f4172d17b74c6b0eb29aee1c_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f4f23309f4172d17b74c6b0eb29aee1c_elex_wannacry
- Size 512KB
- SHA256 f3d09ea0b2578216775d2079db0b0d42687565a5d4847bd7ddc9ae9904f92aaf
- MD5 f4f23309f4172d17b74c6b0eb29aee1c
- SHA1 acbe11f86213ea840751d39016e93a34f1191893
- SHA512 f5e21a3a0e67b93dec4d9f8c1623c83d10e0092f88c9c289a2898bdc77dfec513c03c9a4e05c7db8c9fd8ab3fa223b16b263efdadb4c59e47b6297869ac03a3b
- SSDEEP 6144:MD3IUIeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBXApAX:M7IURuf026ZlmR70Y/k9VS+LPMRWR5Q
- TLSH T1B7B43A0639FCC73BE3D25530CE6DFB90B0F5B9688F21489736D4291D2A76982E316A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory