General
- Target 2026-07-09_28e7d77d236f205487bc6a29e1ff15a6_elex_wannacry
- Size 48KB
- Sample260709-ks2scsgv4v
- SHA256 ebfa0e81d35115e0bbd509f93d17236dd4143e16966fc4c1859273c3cd186428
- MD5 28e7d77d236f205487bc6a29e1ff15a6
- SHA1 0337bef8bad7e2398445c2c3a667b9ddf8506131
- SHA512 5fd0c38635648678165c42ea0cc8cabd033f6c4b66dd40ac229b368d817f40a3f8beebc3d4fe17ce5abf5001b86d17adb8cb45a4b76c0fb5bb68fdc77d2fd3f2
- SSDEEP 768:aTdZuu1Ao2J29ng+nqVshjKrVFRoPKDk53Rx7tfk1FuL1:CSgAo2Q9g4oshjqLbMxeuJ
- TLSH T19423F743AD4B8095E211A6B0456D327DCB7379BA0760D7771784ED3C6837182FC3AA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_28e7d77d236f205487bc6a29e1ff15a6_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_28e7d77d236f205487bc6a29e1ff15a6_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_28e7d77d236f205487bc6a29e1ff15a6_elex_wannacry
- Size 48KB
- SHA256 ebfa0e81d35115e0bbd509f93d17236dd4143e16966fc4c1859273c3cd186428
- MD5 28e7d77d236f205487bc6a29e1ff15a6
- SHA1 0337bef8bad7e2398445c2c3a667b9ddf8506131
- SHA512 5fd0c38635648678165c42ea0cc8cabd033f6c4b66dd40ac229b368d817f40a3f8beebc3d4fe17ce5abf5001b86d17adb8cb45a4b76c0fb5bb68fdc77d2fd3f2
- SSDEEP 768:aTdZuu1Ao2J29ng+nqVshjKrVFRoPKDk53Rx7tfk1FuL1:CSgAo2Q9g4oshjqLbMxeuJ
- TLSH T19423F743AD4B8095E211A6B0456D327DCB7379BA0760D7771784ED3C6837182FC3AA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1