General
- Target 2026-07-17_c9e2fdc100c4a92994b6f9a9a6f7b6e7_amadey_elex_wannacry
- Size 2.4MB
- Sample260717-fpcxlsbs9p
- SHA256 2783e4d47ebe720a559f9400b16706be439f341429439295d6865c638f965eb5
- MD5 c9e2fdc100c4a92994b6f9a9a6f7b6e7
- SHA1 c10a17f253a0654ec00bc85c5b0ac09445fbd479
- SHA512 4291919da38dd209c13d243933c1dbbeb85b42386bb30088b61e7fbc14fd6d47a1d5269a1cdceab2e84af828bb718c2dc14e5902a8de2dcdd956f5af088d7060
- SSDEEP 49152:rWWqs8LIWfX5DZDmNQCfzQeW4SkZP4sz9MbfqJtb2I:rWvsgzhNDm+fkZcf
- TLSH T16BC55C15F6788323D0B3D0B9C5D6AA9AFE3234465B308ACB0246D76C2E277D6C536736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_c9e2fdc100c4a92994b6f9a9a6f7b6e7_amadey_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_c9e2fdc100c4a92994b6f9a9a6f7b6e7_amadey_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_c9e2fdc100c4a92994b6f9a9a6f7b6e7_amadey_elex_wannacry
- Size 2.4MB
- SHA256 2783e4d47ebe720a559f9400b16706be439f341429439295d6865c638f965eb5
- MD5 c9e2fdc100c4a92994b6f9a9a6f7b6e7
- SHA1 c10a17f253a0654ec00bc85c5b0ac09445fbd479
- SHA512 4291919da38dd209c13d243933c1dbbeb85b42386bb30088b61e7fbc14fd6d47a1d5269a1cdceab2e84af828bb718c2dc14e5902a8de2dcdd956f5af088d7060
- SSDEEP 49152:rWWqs8LIWfX5DZDmNQCfzQeW4SkZP4sz9MbfqJtb2I:rWvsgzhNDm+fkZcf
- TLSH T16BC55C15F6788323D0B3D0B9C5D6AA9AFE3234465B308ACB0246D76C2E277D6C536736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory