General
- Target 2026-07-08_af0d257b5f036b21219e44b492ef7d61_elex_wannacry
- Size 64KB
- Sample260708-vnjfbset3t
- SHA256 c61aa62f2f154368a47607f3699d44dde24b48c8ccef223c7de0bc0746451740
- MD5 af0d257b5f036b21219e44b492ef7d61
- SHA1 49a8aca63f3ce99da7be3d03b111614490283b1f
- SHA512 40118272d69d1c35a97b3473fb337897247a9d72cf148094e4ca44ff4916bd0108d3571c2d39a65a8641cc72b54d6350080d669e0ee75e43f62f86eda300a506
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrow4/CFsrdn0A9lsy4:vvw9816vhKQLrow4/wQH9lsl
- TLSH T166535C834BEE98F2F7D21131046D8AB98277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-08_af0d257b5f036b21219e44b492ef7d61_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_af0d257b5f036b21219e44b492ef7d61_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_af0d257b5f036b21219e44b492ef7d61_elex_wannacry
- Size 64KB
- SHA256 c61aa62f2f154368a47607f3699d44dde24b48c8ccef223c7de0bc0746451740
- MD5 af0d257b5f036b21219e44b492ef7d61
- SHA1 49a8aca63f3ce99da7be3d03b111614490283b1f
- SHA512 40118272d69d1c35a97b3473fb337897247a9d72cf148094e4ca44ff4916bd0108d3571c2d39a65a8641cc72b54d6350080d669e0ee75e43f62f86eda300a506
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrow4/CFsrdn0A9lsy4:vvw9816vhKQLrow4/wQH9lsl
- TLSH T166535C834BEE98F2F7D21131046D8AB98277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE