General
- Target 2026-07-15_87f5c52017a538dd3bc82a81ab143e98_elex_wannacry
- Size 80KB
- Sample260715-lr7snacv7y
- SHA256 5ef54be1e526a6960a9e1eaf31e42f6e2075177bc97167311638d6a0c03220a0
- MD5 87f5c52017a538dd3bc82a81ab143e98
- SHA1 534434c9fca4d2ecd13d36c63ec5942534c983b9
- SHA512 b3f059e4ad6f86e8c1f4ebae2465f22bb382bffd948372bc512e148dcf4fdbc0cd81ce48161e8bacc6804f6464873aa6779621c5124df4c7251756d6aba7011b
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroN4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroN4/wQRNrfrunMxVFAi
- TLSH T1BF83C43E5DDA1037E1B3D6B585F12AE7FE66B98339091D0E46D243528C23B43AC86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-15_87f5c52017a538dd3bc82a81ab143e98_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_87f5c52017a538dd3bc82a81ab143e98_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_87f5c52017a538dd3bc82a81ab143e98_elex_wannacry
- Size 80KB
- SHA256 5ef54be1e526a6960a9e1eaf31e42f6e2075177bc97167311638d6a0c03220a0
- MD5 87f5c52017a538dd3bc82a81ab143e98
- SHA1 534434c9fca4d2ecd13d36c63ec5942534c983b9
- SHA512 b3f059e4ad6f86e8c1f4ebae2465f22bb382bffd948372bc512e148dcf4fdbc0cd81ce48161e8bacc6804f6464873aa6779621c5124df4c7251756d6aba7011b
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroN4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroN4/wQRNrfrunMxVFAi
- TLSH T1BF83C43E5DDA1037E1B3D6B585F12AE7FE66B98339091D0E46D243528C23B43AC86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE