General
- Target 2026-07-09_db949cba7988d33dc8b82d1f4f3b7dee_elex_wannacry
- Size 90KB
- Sample260709-tsatbadt4k
- SHA256 980af49e23d7c4f5826eb937b9c786f9ed3ca32ccf9ae1918026be93cad3fb0b
- MD5 db949cba7988d33dc8b82d1f4f3b7dee
- SHA1 426d45dd53abb9b435e5221bc2c44ba1ff8c0e0f
- SHA512 4b20d3c3c629669cd8de4b20a827d717021c80a38846643a80ea04144f93b1cbd15d4997d738ccafe97e72bec1ee25b7e0d36f047e6f1963e9061c010ef95373
- SSDEEP 768:50w981OvhKQLro84/wQ1NrfrunMxVFA3b:CEGN0o8launMxVS3
- TLSH T11C93A37D6DCA1036E173D67185F565FAFE26A5A239090E0E0586C3828E23B43BCD7C1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_db949cba7988d33dc8b82d1f4f3b7dee_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_db949cba7988d33dc8b82d1f4f3b7dee_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_db949cba7988d33dc8b82d1f4f3b7dee_elex_wannacry
- Size 90KB
- SHA256 980af49e23d7c4f5826eb937b9c786f9ed3ca32ccf9ae1918026be93cad3fb0b
- MD5 db949cba7988d33dc8b82d1f4f3b7dee
- SHA1 426d45dd53abb9b435e5221bc2c44ba1ff8c0e0f
- SHA512 4b20d3c3c629669cd8de4b20a827d717021c80a38846643a80ea04144f93b1cbd15d4997d738ccafe97e72bec1ee25b7e0d36f047e6f1963e9061c010ef95373
- SSDEEP 768:50w981OvhKQLro84/wQ1NrfrunMxVFA3b:CEGN0o8launMxVS3
- TLSH T11C93A37D6DCA1036E173D67185F565FAFE26A5A239090E0E0586C3828E23B43BCD7C1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE