c03330332f4ee3cd0b72f67a190509cdcec11f0cf90c0bbc7af9d328bf258203

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 01:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-10_83ccb506d4cca71b3ad75dc81887ba94_elex_wannacry.exe
Size 914KB
Sample260710-bscc2abx8n
SHA256 c03330332f4ee3cd0b72f67a190509cdcec11f0cf90c0bbc7af9d328bf258203
MD5 83ccb506d4cca71b3ad75dc81887ba94
SHA1 ce3826571a74fa8dfc1857e8c64fe824d4f0db84
SHA512 883568fd7a57acc12d359e38fad242836f8bd24bfdc63d7722befa8a44c3ba2aa3282db8bdd9fe9fb3c9a6dd16dcf45529b33cbbda782e7e9e3d853a6f277cd3
SSDEEP 24576:e9C0XrUMFDsTB6vGPG2LW+P+mzRe+rYsVbIhhBylZ:e9C0Xgfe2DRe+rZVbOzyP
TLSH
T130152338B2039471E15A1EB20BB52A80AB3771350E747017F7C0D9ABDEBA7D6F039695
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2532	6416	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-10_83ccb506d4cca71b3ad75dc81887ba94_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-10_83ccb506d4cca71b3ad75dc81887ba94_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-10_83ccb506d4cca71b3ad75dc81887ba94_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6416
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 6416 -s 452
  2⤵
  - Program crash
  PID:2532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 6416 -ip 6416
1⤵
PID:1880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/6416-0-0x0000000000400000-0x000000000042D000-memory.dmp

Download

memory/6416-1-0x0000000000400000-0x000000000042D000-memory.dmp