2026-07-16_459e560f30acc45b2301f941e11d664a_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-16_459e560f30acc45b2301f941e11d664a_elex_wannacry
Size 38.0MB
Sample260716-e48r6agv8t
SHA256 ee8bd94c079b86e4c435398a9e8c41351fc82e487d20e554d0c72e2ef52068bc
MD5 459e560f30acc45b2301f941e11d664a
SHA1 40e9ab9370e6037ca8c66251a09dd14e38630a37
SHA512 1e99da47de15d452cca10dd24a4ededdb93115575d4bcc65c23ad2548f8979f1596625fccf7af267bde7f13f6d61ca99c64d3c2d572eb55129f367ca74ac7a90
SSDEEP 786432:jvKwxtHGs07NjIpUE1rfLIQW00L3kUoUvUGGn0hQPPLW9yG61iY:jv1GskI+EhIZxoUvsn0QL5oY
TLSH
T14B9733327AE3A879F93221B990FCFBC079AE51D068934D079816CD97C8609DDF4E7885
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-07-16_459e560f30acc45b2301f941e11d664a_elex_wannacry

.exe 38.0MB

2026-07-16_459e560f30acc45b2301f941e11d664a_elex_wannacry

IMPHASH 32569d67dc210c5cb9a759b08da2bdb3
SHA256 ee8bd94c079b86e4c435398a9e8c41351fc82e487d20e554d0c72e2ef52068bc
MD5 459e560f30acc45b2301f941e11d664a
SHA1 40e9ab9370e6037ca8c66251a09dd14e38630a37
SHA512 1e99da47de15d452cca10dd24a4ededdb93115575d4bcc65c23ad2548f8979f1596625fccf7af267bde7f13f6d61ca99c64d3c2d572eb55129f367ca74ac7a90
SSDEEP 786432:jvKwxtHGs07NjIpUE1rfLIQW00L3kUoUvUGGn0hQPPLW9yG61iY:jv1GskI+EhIZxoUvsn0QL5oY
TLSH
T14B9733327AE3A879F93221B990FCFBC079AE51D068934D079816CD97C8609DDF4E7885
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

f0:0c:e7:5d:4c:8f:ba:5a:23:7b:8d:18:22:ef:2e:f3:94:67:b1:14:c1:46:31:01:2c:6b:e6:54:00:21:37:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1167847345379,CN=Exbo North LLC,O=Exbo North LLC,STREET=Ropshinskaya st.\, 1/32 / lit A room 10N office 79,L=Saint Petersburg,ST=Saint Petersburg,C=RU,1.2.840.113549.1.9.1=#0c0b7a6976406578626f2e7275,1.3.6.1.4.1.311.60.2.1.2=#13105361696e742050657465727362757267,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Apr 2, 2025

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Digest

53:8a:fe:f0:b6:98:f3:62:85:33:0a:af:bc:ed:69:0b:3b:00:d4:4b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

Apr 2, 2025

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

3d:ee:a9:4e:91:88:32:40:a6:3b:fe:f7

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 28, 2022 - Feb 16, 2026

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 7, 2023 - Dec 9, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

102578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysStringLen SysAllocStringLen VariantClear

user32

DialogBoxParamW SetWindowLongW GetWindowLongW GetDlgItem LoadStringW CharUpperW DestroyWindow EndDialog PostMessageW SetWindowTextW ShowWindow MessageBoxW SendMessageW LoadIconW KillTimer SetTimer

shell32

ShellExecuteExW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memset wcsstr free malloc memcpy _CxxThrowException _purecall memmove memcmp wcscmp __CxxFrameHandler

kernel32

WaitForSingleObject GetStartupInfoA InitializeCriticalSection ResetEvent SetEvent CreateEventW lstrlenW lstrcatW VirtualFree VirtualAlloc Sleep WaitForMultipleObjects GetFileInformationByHandle GetStdHandle GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindClose GetCurrentThreadId GetTickCount GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW GetModuleHandleW GetProcAddress RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime GetSystemDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryExW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetVersionExW GetCommandLineW CreateProcessW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-16_459e560f30acc45b2301f941e11d664a_elex_wannacry

oleaut32

user32

shell32

msvcrt

kernel32

generic