General
- Target 2026-07-06_5400b17d9a7b13744f0542176f325161_elex_wannacry
- Size 32KB
- Sample260707-ecb9waet6j
- SHA256 89a53894dea2620a59225c846bcbef940c1b7f09672f185aa5e550e0af208a67
- MD5 5400b17d9a7b13744f0542176f325161
- SHA1 990d8499c2d401b748797ea56bec9a495d60cfb1
- SHA512 79dc04d2bf499749d17ccb380d258721172b1638f691282827bcfa88b110a305882f9fbe4f40eb958a9559b942a8c9a3c58e39a9c01b6de044169723e0f66670
- SSDEEP 768:Q3NXvkkRfDjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oo+xNPSQU+yVlk8kA:EdbjXRrs9sINeZEtejlIkoLN127BFVnT
- TLSH T187E24234BFD458E2E3779A73F9F691C6783679623C02690C40956F8048F3B52BDA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_5400b17d9a7b13744f0542176f325161_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_5400b17d9a7b13744f0542176f325161_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_5400b17d9a7b13744f0542176f325161_elex_wannacry
- Size 32KB
- SHA256 89a53894dea2620a59225c846bcbef940c1b7f09672f185aa5e550e0af208a67
- MD5 5400b17d9a7b13744f0542176f325161
- SHA1 990d8499c2d401b748797ea56bec9a495d60cfb1
- SHA512 79dc04d2bf499749d17ccb380d258721172b1638f691282827bcfa88b110a305882f9fbe4f40eb958a9559b942a8c9a3c58e39a9c01b6de044169723e0f66670
- SSDEEP 768:Q3NXvkkRfDjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oo+xNPSQU+yVlk8kA:EdbjXRrs9sINeZEtejlIkoLN127BFVnT
- TLSH T187E24234BFD458E2E3779A73F9F691C6783679623C02690C40956F8048F3B52BDA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.