General
- Target 2026-07-06_d1f4c1ce67edec570d304f9b246d86d0_elex_wannacry
- Size 390KB
- Sample260707-a4e3mabx3l
- SHA256 30eb05bfde7aa1dbdd3f0c3be7ec92363270c49fd2f88c326301ae17a5f6de3c
- MD5 d1f4c1ce67edec570d304f9b246d86d0
- SHA1 1b77e2f287181f14f1d2da1c81367146cd883d5d
- SHA512 1113b8f3c021ed66817788f05129050406d4e7d4f43f4d32195a3f6fcaca785434c198fdf8d23666499e33934d43f9d06b91cdd505e979f1d02de0e4cd4f5529
- SSDEEP 3072:ZGC43DkTv+XZZp7000000000000000000000000000000000000000000000000k:ZGC43pZ+
- TLSH T12484C5E47AC25363CB411670E00F0F78627E60DB805E9065A7F39B5697782199EEC2BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_d1f4c1ce67edec570d304f9b246d86d0_elex_wannacry.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_d1f4c1ce67edec570d304f9b246d86d0_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_d1f4c1ce67edec570d304f9b246d86d0_elex_wannacry
- Size 390KB
- SHA256 30eb05bfde7aa1dbdd3f0c3be7ec92363270c49fd2f88c326301ae17a5f6de3c
- MD5 d1f4c1ce67edec570d304f9b246d86d0
- SHA1 1b77e2f287181f14f1d2da1c81367146cd883d5d
- SHA512 1113b8f3c021ed66817788f05129050406d4e7d4f43f4d32195a3f6fcaca785434c198fdf8d23666499e33934d43f9d06b91cdd505e979f1d02de0e4cd4f5529
- SSDEEP 3072:ZGC43DkTv+XZZp7000000000000000000000000000000000000000000000000k:ZGC43pZ+
- TLSH T12484C5E47AC25363CB411670E00F0F78627E60DB805E9065A7F39B5697782199EEC2BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Disables RegEdit via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory