General
- Target 2026-07-06_1b375e2af97364b94b85696f94eabbad_elex_wannacry
- Size 280KB
- Sample260706-2edl2scx9y
- SHA256 7fced23a1bdf30e3b7c77c260ddb8d1453feaa2ed9228d480cd62277bcaaf954
- MD5 1b375e2af97364b94b85696f94eabbad
- SHA1 08effa7f132518d8eaa1d143f8fee104ccba322c
- SHA512 17087f39a1c6492492d0842007446b1b357408de717ec49bcd546ea3cf3db1b36967346cd2fa8608cfe7c1e49adc2ad9109bbf5ac64fc985796055dc31990c36
- SSDEEP 3072:OOXQ2G+IpQZQneFAMx3qe8UzT+nWwXjDRJWwXjDRgjDRbL7SCTrPyXqU3s:xvGlpQEQAMtqNUzCWWXqU3s
- TLSH T10B544B42967A5AD0D818CD3005A634F557EF2C1338079E57E36BFF1F28BADD0AA4E612
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_1b375e2af97364b94b85696f94eabbad_elex_wannacry.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-06_1b375e2af97364b94b85696f94eabbad_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-06_1b375e2af97364b94b85696f94eabbad_elex_wannacry
- Size 280KB
- SHA256 7fced23a1bdf30e3b7c77c260ddb8d1453feaa2ed9228d480cd62277bcaaf954
- MD5 1b375e2af97364b94b85696f94eabbad
- SHA1 08effa7f132518d8eaa1d143f8fee104ccba322c
- SHA512 17087f39a1c6492492d0842007446b1b357408de717ec49bcd546ea3cf3db1b36967346cd2fa8608cfe7c1e49adc2ad9109bbf5ac64fc985796055dc31990c36
- SSDEEP 3072:OOXQ2G+IpQZQneFAMx3qe8UzT+nWwXjDRJWwXjDRgjDRbL7SCTrPyXqU3s:xvGlpQEQAMtqNUzCWWXqU3s
- TLSH T10B544B42967A5AD0D818CD3005A634F557EF2C1338079E57E36BFF1F28BADD0AA4E612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops file in Drivers directory
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
3