General
- Target 2026-07-18_080482d8f5de124a962530de760bfb85_elex_phorpiex_wannacry
- Size 35KB
- Sample260718-bmtp5abw3j
- SHA256 ecac8cde8968d514cdbb91166461dab75b195aef75f3bb6d05e5b441f5efd479
- MD5 080482d8f5de124a962530de760bfb85
- SHA1 2c183b96d1ede82740497225de6aac383f98c179
- SHA512 caf0ea4eb27fc17915c1e2005b09f9ed442e29da08f28652aff74f39c0f3276f13e4d62a5a14b73a7a5966840158ca5ed57efc71e5e581788c59a7a66d28966d
- SSDEEP 768:KLzaIx0dvcbnGvmSS1yDO8h7V/rUcx3qtrFrV:UcjmSSiO8H8trFp
- TLSH T152F2C7076AF40479E4F01C7661786BA316EF683A9F604097EBB094F4983D8B3DF64E16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-18_080482d8f5de124a962530de760bfb85_elex_phorpiex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_080482d8f5de124a962530de760bfb85_elex_phorpiex_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_080482d8f5de124a962530de760bfb85_elex_phorpiex_wannacry
- Size 35KB
- SHA256 ecac8cde8968d514cdbb91166461dab75b195aef75f3bb6d05e5b441f5efd479
- MD5 080482d8f5de124a962530de760bfb85
- SHA1 2c183b96d1ede82740497225de6aac383f98c179
- SHA512 caf0ea4eb27fc17915c1e2005b09f9ed442e29da08f28652aff74f39c0f3276f13e4d62a5a14b73a7a5966840158ca5ed57efc71e5e581788c59a7a66d28966d
- SSDEEP 768:KLzaIx0dvcbnGvmSS1yDO8h7V/rUcx3qtrFrV:UcjmSSiO8H8trFp
- TLSH T152F2C7076AF40479E4F01C7661786BA316EF683A9F604097EBB094F4983D8B3DF64E16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Adds Run key to start application