General
- Target 2026-07-06_baba9bcee48769499927c5575c407e67_elex_wannacry
- Size 59KB
- Sample260707-bpad9se19t
- SHA256 990389e134e00ae54543154b9026bf3c3a3d8db4e1dbf6134804a025ef1fb0df
- MD5 baba9bcee48769499927c5575c407e67
- SHA1 389111ba742f71fd13bcda4e19cf14892f426e70
- SHA512 05cb3ae8151c12014fb8f8b57a9f6c9a680a019c5154e7a080039719002207b9319c940938ed8213c907d5a84d7ab1130bca8f8c12702bd5ac1529a03bc5ab87
- SSDEEP 1536:d2jXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8gIux9Mz+E6P8+kzCz4iKBZ:d2jXRrs9sINeZEtejlIkoLN127BFVn20
- TLSH T1F743BB38AFD515F2E377DAB7E9F695C6B935B4233C02580D40865B840CB3B52EDA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_baba9bcee48769499927c5575c407e67_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_baba9bcee48769499927c5575c407e67_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_baba9bcee48769499927c5575c407e67_elex_wannacry
- Size 59KB
- SHA256 990389e134e00ae54543154b9026bf3c3a3d8db4e1dbf6134804a025ef1fb0df
- MD5 baba9bcee48769499927c5575c407e67
- SHA1 389111ba742f71fd13bcda4e19cf14892f426e70
- SHA512 05cb3ae8151c12014fb8f8b57a9f6c9a680a019c5154e7a080039719002207b9319c940938ed8213c907d5a84d7ab1130bca8f8c12702bd5ac1529a03bc5ab87
- SSDEEP 1536:d2jXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8gIux9Mz+E6P8+kzCz4iKBZ:d2jXRrs9sINeZEtejlIkoLN127BFVn20
- TLSH T1F743BB38AFD515F2E377DAB7E9F695C6B935B4233C02580D40865B840CB3B52EDA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.