General
- Target 2026-07-17_74df78baa9ad3e4ac5a969f62c289d63_elex_wannacry
- Size 64KB
- Sample260717-2dknzabw6w
- SHA256 e6bbcd61f0b963741c6e660f43b11d0efc1269a907e41af890f21a4ed1f71520
- MD5 74df78baa9ad3e4ac5a969f62c289d63
- SHA1 991cafbd1f4828c59577ead31bb69a843e5daa95
- SHA512 8f7ff347b324020cca590082e968627286faac27e70b098e5bcc67b6480947059477942963c300f1fce8d8c40baccb26f5e88a509f26a98677c3dceba2cbce4b
- SSDEEP 192:VbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw5Y04/CFxyNhoy5tT:VbLwOs8AHsc4sMfwhKQLroL4/CFsrdT
- TLSH T19253404A269548A3F94AB1B82CE44D7C61AE55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-17_74df78baa9ad3e4ac5a969f62c289d63_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_74df78baa9ad3e4ac5a969f62c289d63_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_74df78baa9ad3e4ac5a969f62c289d63_elex_wannacry
- Size 64KB
- SHA256 e6bbcd61f0b963741c6e660f43b11d0efc1269a907e41af890f21a4ed1f71520
- MD5 74df78baa9ad3e4ac5a969f62c289d63
- SHA1 991cafbd1f4828c59577ead31bb69a843e5daa95
- SHA512 8f7ff347b324020cca590082e968627286faac27e70b098e5bcc67b6480947059477942963c300f1fce8d8c40baccb26f5e88a509f26a98677c3dceba2cbce4b
- SSDEEP 192:VbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw5Y04/CFxyNhoy5tT:VbLwOs8AHsc4sMfwhKQLroL4/CFsrdT
- TLSH T19253404A269548A3F94AB1B82CE44D7C61AE55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE