General
- Target 2026-07-17_a8b5c2ab2b86f4413960f5718eee17df_elex_wannacry
- Size 64KB
- Sample260718-c3xbmadw2q
- SHA256 57ce0462e48dfd81f5a85a4b11f7acce831aef994adcd46eb329173354d89a19
- MD5 a8b5c2ab2b86f4413960f5718eee17df
- SHA1 ed219f9c068dae0682cf46aa48690149eb315ea4
- SHA512 e7c82e6d1242d558694a13af4a0334ba6b0c9de87e7b5903c87e4ba45de426c4b54abe70b381494f58874f8ed5ca9e2d460c6f299e899f218444dd7425227150
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwsY04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroa4/CFsrd
- TLSH T1AF5307834BDE9CF2F791117108798BB9927B99D4950EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-17_a8b5c2ab2b86f4413960f5718eee17df_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_a8b5c2ab2b86f4413960f5718eee17df_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_a8b5c2ab2b86f4413960f5718eee17df_elex_wannacry
- Size 64KB
- SHA256 57ce0462e48dfd81f5a85a4b11f7acce831aef994adcd46eb329173354d89a19
- MD5 a8b5c2ab2b86f4413960f5718eee17df
- SHA1 ed219f9c068dae0682cf46aa48690149eb315ea4
- SHA512 e7c82e6d1242d558694a13af4a0334ba6b0c9de87e7b5903c87e4ba45de426c4b54abe70b381494f58874f8ed5ca9e2d460c6f299e899f218444dd7425227150
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwsY04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroa4/CFsrd
- TLSH T1AF5307834BDE9CF2F791117108798BB9927B99D4950EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE