General
- Target 2026-07-09_cbe794b8651a7583862f73913abe1c76_elex_wannacry
- Size 64KB
- Sample260709-tyttdaet8z
- SHA256 3a9888c50c923662e1b619089a93347f630ebd9cbe3095c8ddaaeb12ec3a81bc
- MD5 cbe794b8651a7583862f73913abe1c76
- SHA1 26413a9fd70941a67380964ff041e10579d8e3d8
- SHA512 e69b1a659844f3ea955976c86aaabb591f1c9ef0b666e5eb3e24fd0090af57e7f157a51a8b5af20c3cadf5ea3c76f6e461c5d549bd8d15ceb78df51e90f1944d
- SSDEEP 192:VbOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqwrY04/CFxyNhoy5tF:VbLwOs8AHsc4QMfwhKQLroN4/CFsrdF
- TLSH T197533BF3C69BCAA3F6E0713F07644A745127958853896D9BEB48F91E002BFD1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_cbe794b8651a7583862f73913abe1c76_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_cbe794b8651a7583862f73913abe1c76_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_cbe794b8651a7583862f73913abe1c76_elex_wannacry
- Size 64KB
- SHA256 3a9888c50c923662e1b619089a93347f630ebd9cbe3095c8ddaaeb12ec3a81bc
- MD5 cbe794b8651a7583862f73913abe1c76
- SHA1 26413a9fd70941a67380964ff041e10579d8e3d8
- SHA512 e69b1a659844f3ea955976c86aaabb591f1c9ef0b666e5eb3e24fd0090af57e7f157a51a8b5af20c3cadf5ea3c76f6e461c5d549bd8d15ceb78df51e90f1944d
- SSDEEP 192:VbOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqwrY04/CFxyNhoy5tF:VbLwOs8AHsc4QMfwhKQLroN4/CFsrdF
- TLSH T197533BF3C69BCAA3F6E0713F07644A745127958853896D9BEB48F91E002BFD1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE