General
- Target 2026-07-07_b8f88fa0c8c5799427ea75b9d851a984_elex_wannacry
- Size 53KB
- Sample260707-2pbkfaft9t
- SHA256 8969953197fc69a8b561db78405374e979bba588cfde2ef13b8d113c0b4288c3
- MD5 b8f88fa0c8c5799427ea75b9d851a984
- SHA1 2e2a1c86f0e42149f4e07d65451dda0a76e0a76a
- SHA512 8c0f6be6ceeb1e61ec6161c7665ca5f853e80d97a54e8dc54497d1e808b7449020afb3bdd32d97f9e25a97285ea496971b19e3f403919ceb5deb11ce19f52d8e
- SSDEEP 1536:LNxU+W+73uSpoo3e/8+dcr2ySHCT89uuud7bOCR4l:PU+W+qNo3e9Sy/H4d4l
- TLSH T170339D515BA6807FFD701AB81C8762BA81196D2B224BED09E924FD214CD61E3FCF9213
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-07_b8f88fa0c8c5799427ea75b9d851a984_elex_wannacry.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-07_b8f88fa0c8c5799427ea75b9d851a984_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-07_b8f88fa0c8c5799427ea75b9d851a984_elex_wannacry
- Size 53KB
- SHA256 8969953197fc69a8b561db78405374e979bba588cfde2ef13b8d113c0b4288c3
- MD5 b8f88fa0c8c5799427ea75b9d851a984
- SHA1 2e2a1c86f0e42149f4e07d65451dda0a76e0a76a
- SHA512 8c0f6be6ceeb1e61ec6161c7665ca5f853e80d97a54e8dc54497d1e808b7449020afb3bdd32d97f9e25a97285ea496971b19e3f403919ceb5deb11ce19f52d8e
- SSDEEP 1536:LNxU+W+73uSpoo3e/8+dcr2ySHCT89uuud7bOCR4l:PU+W+qNo3e9Sy/H4d4l
- TLSH T170339D515BA6807FFD701AB81C8762BA81196D2B224BED09E924FD214CD61E3FCF9213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Event Triggered Execution: Image File Execution Options Injection
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1