General
- Target 2026-07-06_4fcd9040fdb8b7f35b91438e3fb621df_elex_wannacry
- Size 48KB
- Sample260707-efs2ssht2x
- SHA256 874b6eddfeb471a092eeee59602955882bdc3d6b7c9e214464595aaa4400a818
- MD5 4fcd9040fdb8b7f35b91438e3fb621df
- SHA1 db9d216d204ecf2e96924136fc4c3f1fdcbf3355
- SHA512 4b73003e516aee30b2246f7c59b8959d5ea5434a06392c083e78dc568fd9fa3e7bb23d70076d40a7154c0c04b9394c5fd6b94ba740574c793339018780bf99f8
- SSDEEP 384:AVk0wrG7NRkWbKsNZWdIOD+nVXvsuW6LPtmFSX+IZy/d:AG0wqJRjOIbVXmetmkur
- TLSH T12023473E6EE915F3D37F9B7586F251F6A974B2263D02680E4046C3490853F56BEA0B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_4fcd9040fdb8b7f35b91438e3fb621df_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_4fcd9040fdb8b7f35b91438e3fb621df_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_4fcd9040fdb8b7f35b91438e3fb621df_elex_wannacry
- Size 48KB
- SHA256 874b6eddfeb471a092eeee59602955882bdc3d6b7c9e214464595aaa4400a818
- MD5 4fcd9040fdb8b7f35b91438e3fb621df
- SHA1 db9d216d204ecf2e96924136fc4c3f1fdcbf3355
- SHA512 4b73003e516aee30b2246f7c59b8959d5ea5434a06392c083e78dc568fd9fa3e7bb23d70076d40a7154c0c04b9394c5fd6b94ba740574c793339018780bf99f8
- SSDEEP 384:AVk0wrG7NRkWbKsNZWdIOD+nVXvsuW6LPtmFSX+IZy/d:AG0wqJRjOIbVXmetmkur
- TLSH T12023473E6EE915F3D37F9B7586F251F6A974B2263D02680E4046C3490853F56BEA0B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.