General
- Target 2026-07-08_4718a66cf573322335cfc4729086025b_elex_wannacry
- Size 89KB
- Sample260708-wprzjaes2m
- SHA256 bcaf7a9334ab448d838ad291bf5cf9b6acff46e144ce2b8ba0d0c045adec50c9
- MD5 4718a66cf573322335cfc4729086025b
- SHA1 f14e1123f5d7889a42648ba29482522d7a83c65b
- SHA512 dbbe67b3d3ffd909fa6142dce6cbce81006e42beee48999dcb0f5e8b31a0ed6086724c3caa66c531ddd42df458a0608c86a0873b991aeb54337dab83f6fa31f6
- SSDEEP 768:Qvw9816vhKQLro04/wQRNrfrunMxVFA3b7gls:YEGh0o0l2unMxVS3HgO
- TLSH T13C93A33D5DDA1037E277D6B585F126E3FE66B9833A0A1D0E469343428D23B53AD8AC1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-08_4718a66cf573322335cfc4729086025b_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_4718a66cf573322335cfc4729086025b_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_4718a66cf573322335cfc4729086025b_elex_wannacry
- Size 89KB
- SHA256 bcaf7a9334ab448d838ad291bf5cf9b6acff46e144ce2b8ba0d0c045adec50c9
- MD5 4718a66cf573322335cfc4729086025b
- SHA1 f14e1123f5d7889a42648ba29482522d7a83c65b
- SHA512 dbbe67b3d3ffd909fa6142dce6cbce81006e42beee48999dcb0f5e8b31a0ed6086724c3caa66c531ddd42df458a0608c86a0873b991aeb54337dab83f6fa31f6
- SSDEEP 768:Qvw9816vhKQLro04/wQRNrfrunMxVFA3b7gls:YEGh0o0l2unMxVS3HgO
- TLSH T13C93A33D5DDA1037E277D6B585F126E3FE66B9833A0A1D0E469343428D23B53AD8AC1C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.