General
- Target 2026-07-07_ae6c56907a52a6d60c77c0279fc1ced5_elex_rincux_wannacry
- Size 64KB
- Sample260707-p7f7esft6r
- SHA256 9ab16b72acca09c0d6c93bd0a4c442740202d019b4bdad7070160ad9770a3d51
- MD5 ae6c56907a52a6d60c77c0279fc1ced5
- SHA1 bff9752c5bd14f34b344d68386a7058dc9aa7cf2
- SHA512 cb8d6726465cd7a6a633fe9e684e7ca921e94ee9cb475d3d0b9ca51ca659771a850e1f38fbf66ff3945b18c4c34fe1c41e3443cf01db409dcaa9286067e63f8a
- SSDEEP 768:Ovw9816vhKQLroCS4/QQtsYacQcpFcTcgDawVQTTyS1tl7lfqvocqcdlV9:6EGh0oCSFus9cQcpFgDawGnyS1loLlL
- TLSH T1EE535A03A684B5F2EB680135B19F0FBE963796B1C0CD282F5B638DA55862863F431E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-07_ae6c56907a52a6d60c77c0279fc1ced5_elex_rincux_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_ae6c56907a52a6d60c77c0279fc1ced5_elex_rincux_wannacry.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_ae6c56907a52a6d60c77c0279fc1ced5_elex_rincux_wannacry
- Size 64KB
- SHA256 9ab16b72acca09c0d6c93bd0a4c442740202d019b4bdad7070160ad9770a3d51
- MD5 ae6c56907a52a6d60c77c0279fc1ced5
- SHA1 bff9752c5bd14f34b344d68386a7058dc9aa7cf2
- SHA512 cb8d6726465cd7a6a633fe9e684e7ca921e94ee9cb475d3d0b9ca51ca659771a850e1f38fbf66ff3945b18c4c34fe1c41e3443cf01db409dcaa9286067e63f8a
- SSDEEP 768:Ovw9816vhKQLroCS4/QQtsYacQcpFcTcgDawVQTTyS1tl7lfqvocqcdlV9:6EGh0oCSFus9cQcpFgDawGnyS1loLlL
- TLSH T1EE535A03A684B5F2EB680135B19F0FBE963796B1C0CD282F5B638DA55862863F431E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.