General
- Target 2026-07-06_12fd7ed949a590b96324b9ef8abdc1bb_elex_wannacry
- Size 532KB
- Sample260706-2khsysh12j
- SHA256 2b298a128457b43049f4ae5479741e9d1d9728dc683449748b4246eb73b5647d
- MD5 12fd7ed949a590b96324b9ef8abdc1bb
- SHA1 c36e5fad8e9a84e473f0485829971fc7dce90359
- SHA512 ced8f023342ffa554bdd324068d646be41ccb1a59a42b2c9e1f2e1b1acd77dbbf0bd13bd46c9192966a063ba8d3f575de835f66757ecf9c791ac556c2c8e9cfe
- SSDEEP 3072:w94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQ1Z:U4sZBOZdjEYTPXMhaMP/kFTA7OAk
- TLSH T1E4C41C3406B18E04D463C3B42C950D955D691EF9CDF86796C707A0AE29BD3FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_12fd7ed949a590b96324b9ef8abdc1bb_elex_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_12fd7ed949a590b96324b9ef8abdc1bb_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_12fd7ed949a590b96324b9ef8abdc1bb_elex_wannacry
- Size 532KB
- SHA256 2b298a128457b43049f4ae5479741e9d1d9728dc683449748b4246eb73b5647d
- MD5 12fd7ed949a590b96324b9ef8abdc1bb
- SHA1 c36e5fad8e9a84e473f0485829971fc7dce90359
- SHA512 ced8f023342ffa554bdd324068d646be41ccb1a59a42b2c9e1f2e1b1acd77dbbf0bd13bd46c9192966a063ba8d3f575de835f66757ecf9c791ac556c2c8e9cfe
- SSDEEP 3072:w94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQ1Z:U4sZBOZdjEYTPXMhaMP/kFTA7OAk
- TLSH T1E4C41C3406B18E04D463C3B42C950D955D691EF9CDF86796C707A0AE29BD3FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory