General
- Target 2026-07-18_48782e822952afae16c621caef7db2ed_elex_wannacry
- Size 64KB
- Sample260718-bgt4psfs2z
- SHA256 a4fbdbcf3f3c351c497a47ca861b93c2ae07df03e90b46c73dbd96ad6d025ac0
- MD5 48782e822952afae16c621caef7db2ed
- SHA1 3f96ea070ce90a61880cdf97698cc053b340624f
- SHA512 eb2b7c110ae23dae4c9b9869e91f78630fbc2ea9db48d7ab900c90162b340428c58cfe313e0f9183bfe7d34ad69c194ba3684d19aa155d32c6d8bfc2a396913c
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwkY04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroS4/CFsrd
- TLSH T1C75308834BDE9CF2FB91117108794BB9927B99D4910EBEDFAF90CD550077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-18_48782e822952afae16c621caef7db2ed_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_48782e822952afae16c621caef7db2ed_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_48782e822952afae16c621caef7db2ed_elex_wannacry
- Size 64KB
- SHA256 a4fbdbcf3f3c351c497a47ca861b93c2ae07df03e90b46c73dbd96ad6d025ac0
- MD5 48782e822952afae16c621caef7db2ed
- SHA1 3f96ea070ce90a61880cdf97698cc053b340624f
- SHA512 eb2b7c110ae23dae4c9b9869e91f78630fbc2ea9db48d7ab900c90162b340428c58cfe313e0f9183bfe7d34ad69c194ba3684d19aa155d32c6d8bfc2a396913c
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwkY04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroS4/CFsrd
- TLSH T1C75308834BDE9CF2FB91117108794BB9927B99D4910EBEDFAF90CD550077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE