88633676b423b97417b5fc453915c0f91438dfd3d1fdf474338a35198f8372da | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-07-05...ry.exe

windows10-2004-x64

2026-07-05...ry.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_d94f82be064f33af7044152a12ac0dc8_elex_ngrbot_wannacry
Size 48KB
Sample260705-grve4sdy9j
SHA256 88633676b423b97417b5fc453915c0f91438dfd3d1fdf474338a35198f8372da
MD5 d94f82be064f33af7044152a12ac0dc8
SHA1 4d88833c4f96573954ec1ac121cff6a357599281
SHA512 1e294ff5bf678b34efa13e4158572c97f16119e6c96f84621e000bd694fc984a702d8978bcdaf5cc1985b7e626a07af3c62b971b711a76beb4a20595d345bad0
SSDEEP 384:3X39Ik3BUuhy3cEBINtEnfESpTi9xjcWPMncMhTKUHeKYNm610DnsGImKq83bKxx:tF3+wysT3xmWEncMh+UHeKqJ0IGJKex
TLSH
T1CA23080E6DE5C033C8A611F12B254A76A7FFE5310154F32BDB8457187AB4E98EE3825B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence privilege_escalation stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-05_d94f82be064f33af7044152a12ac0dc8_elex_ngrbot_wannacry.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation stealer

Behavioral task

behavioral2

Sample

2026-07-05_d94f82be064f33af7044152a12ac0dc8_elex_ngrbot_wannacry.exe

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation stealer

Malware Config

Targets

- Target
  2026-07-05_d94f82be064f33af7044152a12ac0dc8_elex_ngrbot_wannacry
- Size 48KB
- SHA256 88633676b423b97417b5fc453915c0f91438dfd3d1fdf474338a35198f8372da
- MD5 d94f82be064f33af7044152a12ac0dc8
- SHA1 4d88833c4f96573954ec1ac121cff6a357599281
- SHA512 1e294ff5bf678b34efa13e4158572c97f16119e6c96f84621e000bd694fc984a702d8978bcdaf5cc1985b7e626a07af3c62b971b711a76beb4a20595d345bad0
- SSDEEP 384:3X39Ik3BUuhy3cEBINtEnfESpTi9xjcWPMncMhTKUHeKYNm610DnsGImKq83bKxx:tF3+wysT3xmWEncMh+UHeKqJ0IGJKex
- TLSH
  T1CA23080E6DE5C033C8A611F12B254A76A7FFE5310154F32BDB8457187AB4E98EE3825B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence privilege_escalation stealer
- Modifies firewall policy service
  defense_evasion
- Modifies Windows Firewall
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalationstealer

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalationstealer

© 2018-2026

Terms | Privacy