General
- Target 2026-07-09_e3f9c6c46ce88a2cff5f5db649017d54_elex_wannacry
- Size 90KB
- Sample260709-tpzchads7k
- SHA256 a835eed6118b105dea8d57627171fc23c8bef31108372030ce7b174a1e58e50d
- MD5 e3f9c6c46ce88a2cff5f5db649017d54
- SHA1 3e09d707cbce081cb6fc719d2f6b448d7e4efba8
- SHA512 af3254e2da248d5bb0d24d2a374d617653fce2054d967021f875f345ed5c4548dc6d7cbcc679796f1241b78ccdf75c9828ee2b2f7e87498b2b10b71373205630
- SSDEEP 768:Qvw9816vhKQLrot4/wQRNrfrunMxVFA3b7glR:YEGh0otl2unMxVS3Hg/
- TLSH T1BD93B53D5DDA1037E2B7D6B585F126E3FE66B98339091D0E46D243428D23B53AD86C1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_e3f9c6c46ce88a2cff5f5db649017d54_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_e3f9c6c46ce88a2cff5f5db649017d54_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_e3f9c6c46ce88a2cff5f5db649017d54_elex_wannacry
- Size 90KB
- SHA256 a835eed6118b105dea8d57627171fc23c8bef31108372030ce7b174a1e58e50d
- MD5 e3f9c6c46ce88a2cff5f5db649017d54
- SHA1 3e09d707cbce081cb6fc719d2f6b448d7e4efba8
- SHA512 af3254e2da248d5bb0d24d2a374d617653fce2054d967021f875f345ed5c4548dc6d7cbcc679796f1241b78ccdf75c9828ee2b2f7e87498b2b10b71373205630
- SSDEEP 768:Qvw9816vhKQLrot4/wQRNrfrunMxVFA3b7glR:YEGh0otl2unMxVS3Hg/
- TLSH T1BD93B53D5DDA1037E2B7D6B585F126E3FE66B98339091D0E46D243428D23B53AD86C1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE