General
- Target 2026-07-03_1932ddaab57c527bafa0de62772202ff_elex_wannacry
- Size 61KB
- Sample260703-kt8bjaa14j
- SHA256 c40d9ca7b281ae761c87caa39a4d447d6c3c595a254c13c1debdb10336699615
- MD5 1932ddaab57c527bafa0de62772202ff
- SHA1 aa6976385580c69bd6fd52d2a9199dd3451788d4
- SHA512 68e22daa6853015a80500a25b7c72ef15a78200480661612ad7b5fdbd84a5e61880d9602bc2362fc5410063e81b5d6af85cddcff8434bce2e42a3398bb909ba5
- SSDEEP 768:RVSJwmwf4NOj1TS5of/2DG86/LO8PqJuFTgwslRcW9KKldcoK2n:rmwfKOj1TRf/2SZLO8iJu7I9KKlDV
- TLSH T1D0537A3CAED51572E37BDAB6C6F251C6F975BC223D02680D408673850C33F66ADA1A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_1932ddaab57c527bafa0de62772202ff_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_1932ddaab57c527bafa0de62772202ff_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_1932ddaab57c527bafa0de62772202ff_elex_wannacry
- Size 61KB
- SHA256 c40d9ca7b281ae761c87caa39a4d447d6c3c595a254c13c1debdb10336699615
- MD5 1932ddaab57c527bafa0de62772202ff
- SHA1 aa6976385580c69bd6fd52d2a9199dd3451788d4
- SHA512 68e22daa6853015a80500a25b7c72ef15a78200480661612ad7b5fdbd84a5e61880d9602bc2362fc5410063e81b5d6af85cddcff8434bce2e42a3398bb909ba5
- SSDEEP 768:RVSJwmwf4NOj1TS5of/2DG86/LO8PqJuFTgwslRcW9KKldcoK2n:rmwfKOj1TRf/2SZLO8iJu7I9KKlDV
- TLSH T1D0537A3CAED51572E37BDAB6C6F251C6F975BC223D02680D408673850C33F66ADA1A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.