Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/07/2026, 16:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_b5474e929a0634ac2595686cf2d6a4e8_amadey_elex_smoke-loader_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_b5474e929a0634ac2595686cf2d6a4e8_amadey_elex_smoke-loader_wannacry.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-10_b5474e929a0634ac2595686cf2d6a4e8_amadey_elex_smoke-loader_wannacry.exe
- Size 861KB
- Sample260710-tkz38sez21
- SHA256 c7505a5b7eb605cd59c75183762571eb4e92bf0e45dd4193534dda9e9f36270d
- MD5 b5474e929a0634ac2595686cf2d6a4e8
- SHA1 8dc13daf6649a2f09cc860307410e6944ba2621a
- SHA512 28fe70790d874f434f8c2d68967e47a994a0cda955a24b961849fab633a31275faf1911a7303b9ab0a512a3a1acb30d7ccb111907bdfeebe162602db7708fe75
- SSDEEP 12288:h0RUB+J6ca5pz8fTzQk9kT+Vz2fW5OXG4kbKbtLpm1EwtLpm1E:hPkaaP9kT82u2GNKbtLpwbtLpw
- TLSH T1BB153825BBF844B6F4B3D5BE99B69719D67278115B20C7CB13118A6E4E33AC08D39332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-10_b5474e929a0634ac2595686cf2d6a4e8_amadey_elex_smoke-loader_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-10_b5474e929a0634ac2595686cf2d6a4e8_amadey_elex_smoke-loader_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-10_b5474e929a0634ac2595686cf2d6a4e8_amadey_elex_smoke-loader_wannacry.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3740