General
- Target 2026-07-06_91311854694852f05c4f9627998a426f_elex_wannacry
- Size 369KB
- Sample260706-wjszmsax7x
- SHA256 cab9d059cb9f8786f6e5befae3887e62a5e7d39ae011e6fc6d060a30d3a9c713
- MD5 91311854694852f05c4f9627998a426f
- SHA1 2002ee3c79a45c98f5e472f8adf7d751ffafe102
- SHA512 4d570650e092b9df996fc8cd24dc52b303108e694b56cac8f52fc9e116a559407904d2a8ace3cef6f55a67f9e9e0e5556a1f4f7bb9ac8d619a097d5cb1958314
- SSDEEP 3072:XNsgVuqOEYCBtVkD0+XhkOuUcNTeUPgAqpQRxqFNsHNsgENsg0bNsgQNsg6NsjNK:dxEqOEYeH0rXcNdKSx4xoxsxe69xBx2
- TLSH T19B8429CEF9D64596E0879BB0236E91B0D0366CF68B406BA3D34BAD5750BDC4920CB2D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_91311854694852f05c4f9627998a426f_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_91311854694852f05c4f9627998a426f_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_91311854694852f05c4f9627998a426f_elex_wannacry
- Size 369KB
- SHA256 cab9d059cb9f8786f6e5befae3887e62a5e7d39ae011e6fc6d060a30d3a9c713
- MD5 91311854694852f05c4f9627998a426f
- SHA1 2002ee3c79a45c98f5e472f8adf7d751ffafe102
- SHA512 4d570650e092b9df996fc8cd24dc52b303108e694b56cac8f52fc9e116a559407904d2a8ace3cef6f55a67f9e9e0e5556a1f4f7bb9ac8d619a097d5cb1958314
- SSDEEP 3072:XNsgVuqOEYCBtVkD0+XhkOuUcNTeUPgAqpQRxqFNsHNsgENsg0bNsgQNsg6NsjNK:dxEqOEYeH0rXcNdKSx4xoxsxe69xBx2
- TLSH T19B8429CEF9D64596E0879BB0236E91B0D0366CF68B406BA3D34BAD5750BDC4920CB2D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1