General
- Target 2026-07-03_b9ba888ac024a765924827396a1a0cf8_elex_wannacry
- Size 320KB
- Sample260703-xk2tlsbs4r
- SHA256 d1f0cd7616a33429eedd6a8b34dec3a109ac3c8d23b735ff50d50c9f7060fc53
- MD5 b9ba888ac024a765924827396a1a0cf8
- SHA1 beb0711f97ac7cef8cf96dc69e3f43bb31c95f2b
- SHA512 3fd873cf8af9f553d6ec5c7df09a1e5d3261b17c2230cc74e8fde8d6115af82108bb031cc76be7f34a24ce0fc4b802ab8b66c192764eaea89a40216bcf92dc08
- SSDEEP 3072:fDEGh0oXlZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEGNlnOe2MUVg3vdeKcAEjy
- TLSH T1E764A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-03_b9ba888ac024a765924827396a1a0cf8_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_b9ba888ac024a765924827396a1a0cf8_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_b9ba888ac024a765924827396a1a0cf8_elex_wannacry
- Size 320KB
- SHA256 d1f0cd7616a33429eedd6a8b34dec3a109ac3c8d23b735ff50d50c9f7060fc53
- MD5 b9ba888ac024a765924827396a1a0cf8
- SHA1 beb0711f97ac7cef8cf96dc69e3f43bb31c95f2b
- SHA512 3fd873cf8af9f553d6ec5c7df09a1e5d3261b17c2230cc74e8fde8d6115af82108bb031cc76be7f34a24ce0fc4b802ab8b66c192764eaea89a40216bcf92dc08
- SSDEEP 3072:fDEGh0oXlZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEGNlnOe2MUVg3vdeKcAEjy
- TLSH T1E764A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE