General
- Target 2026-07-17_f7e09d6c428b91f368033b3dfde81d71_elex_wannacry
- Size 84KB
- Sample260718-bs4saabx8k
- SHA256 d6e6a80687f9a2dd7968b5c74db1a44361acfa474ea558bd3e7f644254062d4c
- MD5 f7e09d6c428b91f368033b3dfde81d71
- SHA1 3056bf007bed259101433afa7ca1ad21079aa2df
- SHA512 07b0ede8b8f8123cf4f197ec657ada8583eb438f55a3a2dd402f9a5bd9f235f1655f78477310cfffc0c192b147a74cea834d48eac79e598b96270366d07e5e8d
- SSDEEP 768:svw9816vhKQLroa4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oallZCJvCJXX0SCJXuev
- TLSH T16E831A5372DC5CF3F1A613382977AF6B8D42BB90050A3B525AC08A8F499C9D7D62C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-17_f7e09d6c428b91f368033b3dfde81d71_elex_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_f7e09d6c428b91f368033b3dfde81d71_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_f7e09d6c428b91f368033b3dfde81d71_elex_wannacry
- Size 84KB
- SHA256 d6e6a80687f9a2dd7968b5c74db1a44361acfa474ea558bd3e7f644254062d4c
- MD5 f7e09d6c428b91f368033b3dfde81d71
- SHA1 3056bf007bed259101433afa7ca1ad21079aa2df
- SHA512 07b0ede8b8f8123cf4f197ec657ada8583eb438f55a3a2dd402f9a5bd9f235f1655f78477310cfffc0c192b147a74cea834d48eac79e598b96270366d07e5e8d
- SSDEEP 768:svw9816vhKQLroa4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oallZCJvCJXX0SCJXuev
- TLSH T16E831A5372DC5CF3F1A613382977AF6B8D42BB90050A3B525AC08A8F499C9D7D62C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE