General
- Target 2026-07-04_dab8b1c9e361918be8d9a6835adfc846_elex_wannacry
- Size 532KB
- Sample260704-l5m1eady81
- SHA256 9e0e63f57cdcfd0c624dca43d5c169dd0428a589f0b1742503d258f346c62e54
- MD5 dab8b1c9e361918be8d9a6835adfc846
- SHA1 fb559c2a163e1e8f5feb8637e17059d4835c867b
- SHA512 e4dea42f4a55cc73ecd361d8baf2da042f4a767fe7d9c5f2a8b27601d8df85915faddaa24a9d7ce0fbc8f31917ad6049131653a8fcdee1b864b8551d24468c25
- SSDEEP 3072:p94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQvR:T4sZBOZdjEYTPXMhaMP/kFTA7OAm
- TLSH T1EDC41C3406B18E04D463C3B42C950D955D691EF8CDF86796C707A0AE29BD7FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_dab8b1c9e361918be8d9a6835adfc846_elex_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_dab8b1c9e361918be8d9a6835adfc846_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_dab8b1c9e361918be8d9a6835adfc846_elex_wannacry
- Size 532KB
- SHA256 9e0e63f57cdcfd0c624dca43d5c169dd0428a589f0b1742503d258f346c62e54
- MD5 dab8b1c9e361918be8d9a6835adfc846
- SHA1 fb559c2a163e1e8f5feb8637e17059d4835c867b
- SHA512 e4dea42f4a55cc73ecd361d8baf2da042f4a767fe7d9c5f2a8b27601d8df85915faddaa24a9d7ce0fbc8f31917ad6049131653a8fcdee1b864b8551d24468c25
- SSDEEP 3072:p94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQvR:T4sZBOZdjEYTPXMhaMP/kFTA7OAm
- TLSH T1EDC41C3406B18E04D463C3B42C950D955D691EF8CDF86796C707A0AE29BD7FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory