General
- Target 2026-07-04_80431b56cf05491e16dea0620677cbe8_elex_wannacry
- Size 16KB
- Sample260704-1r13faev4v
- SHA256 9ec587b9cd48b1608ceb9388ef7f86a362f2640bb7fa56d8834eef7e35252073
- MD5 80431b56cf05491e16dea0620677cbe8
- SHA1 d539b695ec8eca5f4898e54d70993b141f900f69
- SHA512 f0a8559bcbc17c4871df8ce1cd207cd8931d29a6f3bf41d4906fc4874f6a53faca5880b78314051416503df6dfe6ee5ca6187bb221dc9bf7f1275a26a8f6b434
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3bBP:uTQWckBeEd6ml1pcg7F3GiElpiBP
- TLSH T11872C635ABD45D73E3FBD7B196FBC1D56975B03B2B03592E80481B892C23B109D60B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-04_80431b56cf05491e16dea0620677cbe8_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_80431b56cf05491e16dea0620677cbe8_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_80431b56cf05491e16dea0620677cbe8_elex_wannacry
- Size 16KB
- SHA256 9ec587b9cd48b1608ceb9388ef7f86a362f2640bb7fa56d8834eef7e35252073
- MD5 80431b56cf05491e16dea0620677cbe8
- SHA1 d539b695ec8eca5f4898e54d70993b141f900f69
- SHA512 f0a8559bcbc17c4871df8ce1cd207cd8931d29a6f3bf41d4906fc4874f6a53faca5880b78314051416503df6dfe6ee5ca6187bb221dc9bf7f1275a26a8f6b434
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3bBP:uTQWckBeEd6ml1pcg7F3GiElpiBP
- TLSH T11872C635ABD45D73E3FBD7B196FBC1D56975B03B2B03592E80481B892C23B109D60B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE