General
- Target 2026-07-08_043a6a2dde2c800a174b3dda984e2b6b_elex_wannacry
- Size 17KB
- Sample260708-2ncfcabs2x
- SHA256 fe1ba1f9c513bdbae25569579e2144380a268a4d973e5aeb97d5d72e705de854
- MD5 043a6a2dde2c800a174b3dda984e2b6b
- SHA1 3786d48f161b1c2b522f095ad01218e65952d667
- SHA512 d787cfed1431332ad64ad4150d685f7bbe5d662ba8fe10c8059b95fcbf21fbec43fb800a79db0dc3f06e5566231dc227b5d96d23140d9e3e83c23eda159c7945
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6/:uTQWckBeEd6ml1pcg7F3GiElpd2Q
- TLSH T1BF82B6356BD55D73E3BBD7B186FBC1C66875702B2B03992E80481B882C33A11DCA0F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-08_043a6a2dde2c800a174b3dda984e2b6b_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_043a6a2dde2c800a174b3dda984e2b6b_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_043a6a2dde2c800a174b3dda984e2b6b_elex_wannacry
- Size 17KB
- SHA256 fe1ba1f9c513bdbae25569579e2144380a268a4d973e5aeb97d5d72e705de854
- MD5 043a6a2dde2c800a174b3dda984e2b6b
- SHA1 3786d48f161b1c2b522f095ad01218e65952d667
- SHA512 d787cfed1431332ad64ad4150d685f7bbe5d662ba8fe10c8059b95fcbf21fbec43fb800a79db0dc3f06e5566231dc227b5d96d23140d9e3e83c23eda159c7945
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6/:uTQWckBeEd6ml1pcg7F3GiElpd2Q
- TLSH T1BF82B6356BD55D73E3BBD7B186FBC1C66875702B2B03992E80481B882C33A11DCA0F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE