General
- Target 2026-07-16_2be0de84bfca8abc9ea7350492a20f27_elex_wannacry
- Size 57KB
- Sample260716-k4m4cahs5r
- SHA256 d093ecd9642a1111232b5991776f5d05a9f49c93345262ad7c4fe3ef464a2772
- MD5 2be0de84bfca8abc9ea7350492a20f27
- SHA1 dd5b3a29fc73b02f8d845e8a7ac840113c8f2791
- SHA512 fa88a7b0c1bd22e5c0ca461381d5ae3f1f2dd1d895ed167ac0ac63c4e40c5adc8b2abf8804eae3c1ee317fef3d86113d2876c1583e093811c5983da343250299
- SSDEEP 768:F/3ed1zZN/zoy0rtsGA4i2BIHRmibsa4BJs6dHqv+9nm:FvWbzooeOsi4a4xtqv+w
- TLSH T10243B978AFD91572E37BDEB9C9F2A1C3B972B0267D02580D40C247450D23F56EDA2A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-16_2be0de84bfca8abc9ea7350492a20f27_elex_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_2be0de84bfca8abc9ea7350492a20f27_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_2be0de84bfca8abc9ea7350492a20f27_elex_wannacry
- Size 57KB
- SHA256 d093ecd9642a1111232b5991776f5d05a9f49c93345262ad7c4fe3ef464a2772
- MD5 2be0de84bfca8abc9ea7350492a20f27
- SHA1 dd5b3a29fc73b02f8d845e8a7ac840113c8f2791
- SHA512 fa88a7b0c1bd22e5c0ca461381d5ae3f1f2dd1d895ed167ac0ac63c4e40c5adc8b2abf8804eae3c1ee317fef3d86113d2876c1583e093811c5983da343250299
- SSDEEP 768:F/3ed1zZN/zoy0rtsGA4i2BIHRmibsa4BJs6dHqv+9nm:FvWbzooeOsi4a4xtqv+w
- TLSH T10243B978AFD91572E37BDEB9C9F2A1C3B972B0267D02580D40C247450D23F56EDA2A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE