2026-07-09_7924b11f1b98b5fcfa8a3c3c86f84e5d_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_7924b11f1b98b5fcfa8a3c3c86f84e5d_elex_wannacry
Size 532KB
Sample260709-ml4pgshx4v
SHA256 607a4f4279c5952c8fcfeb5afdcb6c348de168e28d9cd45f15b7b441e454a597
MD5 7924b11f1b98b5fcfa8a3c3c86f84e5d
SHA1 3969702f731f36f10bb2ef276a39c332404735b6
SHA512 7e46a51cab0d6bae536f7322d7829d66bf6492ccdecfa8e87a96b6614adcba60a36884de251d7c20d501a84ff63a0fb927fc57ace50692f6a669f12aeaade061
SSDEEP 3072:594sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQbZ:j4sZBOZdjEYTPXMhaMP/kFTA7OA2
TLSH
T1E2C41C3406B18E04D463C3B42C950D955D691EF9CDF86796C707A0AE29BD3FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_7924b11f1b98b5fcfa8a3c3c86f84e5d_elex_wannacry

File Explorer

2026-07-09_7924b11f1b98b5fcfa8a3c3c86f84e5d_elex_wannacry

.exe 532KB

2026-07-09_7924b11f1b98b5fcfa8a3c3c86f84e5d_elex_wannacry

IMPHASH 5331ce77aa0d7f10da3e13b1a5022f58
SHA256 607a4f4279c5952c8fcfeb5afdcb6c348de168e28d9cd45f15b7b441e454a597
MD5 7924b11f1b98b5fcfa8a3c3c86f84e5d
SHA1 3969702f731f36f10bb2ef276a39c332404735b6
SHA512 7e46a51cab0d6bae536f7322d7829d66bf6492ccdecfa8e87a96b6614adcba60a36884de251d7c20d501a84ff63a0fb927fc57ace50692f6a669f12aeaade061
SSDEEP 3072:594sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQbZ:j4sZBOZdjEYTPXMhaMP/kFTA7OA2
TLSH
T1E2C41C3406B18E04D463C3B42C950D955D691EF9CDF86796C707A0AE29BD3FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

mfc42

ord5778 ord5465 ord3511 ord5194 ord268 ord350 ord533 ord938 ord833 ord919 ord3810 ord5934 ord2438 ord1644 ord6407 ord2584 ord3654 ord5572 ord5641 ord5592 ord1081 ord911 ord4187 ord698 ord415 ord396 ord715 ord539 ord542 ord6569 ord802 ord1997 ord1567 ord798 ord964 ord3663 ord3616 ord3127 ord5651 ord2919 ord6282 ord6283 ord6874 ord923 ord354 ord5186 ord665 ord5773 ord5442 ord6385 ord1979 ord3811 ord551 ord2915 ord940 ord823 ord922 ord926 ord924 ord2614 ord860 ord5683 ord4277 ord858 ord4129 ord941 ord4202 ord2764 ord2818 ord535 ord537 ord1105 ord800 ord825 ord540 ord861 ord4220

msvcrt

wcslen wcscmp _controlfp __set_app_type strtol __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ ?terminate@@YAXXZ strncpy time srand wcsstr _mbscmp _access atoi _mbsnbcpy rand _mbsicmp __CxxFrameHandler _CxxThrowException _except_handler3 __p__fmode

kernel32

LocalAlloc OutputDebugStringA CreateMutexA LocalFree GetSystemDirectoryA CreateSemaphoreA CopyFileA ReleaseSemaphore GetVersionExA SetFileAttributesA DeleteFileA ExitProcess GetLastError GetModuleHandleA CreateToolhelp32Snapshot Process32First OpenProcess GetPriorityClass Process32Next GetWindowsDirectoryA TerminateProcess Sleep GetModuleFileNameA SetEvent WaitForSingleObject CloseHandle CreateEventA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA FreeLibrary OpenEventA LockResource MultiByteToWideChar LoadLibraryExA EnumResourceNamesA EnumResourceLanguagesA FindResourceExA SizeofResource LoadResource GetStartupInfoA

user32

CreateMenu wsprintfA

advapi32

RegSetValueExA RegOpenKeyExA RegDeleteValueA RegCloseKey RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoUninitialize CoTaskMemFree CoInitialize CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_7924b11f1b98b5fcfa8a3c3c86f84e5d_elex_wannacry

psapi

version

mfc42

msvcrt

kernel32

user32

advapi32

shell32

ole32

generic