General
- Target 2026-07-17_d571e9bc8fd22254b4dce3df71a2e0ba_elex_wannacry
- Size 4.2MB
- Sample260718-cbx4vacv9l
- SHA256 6eb407c2d76898d0bdfb1f23e0e02656acebe833bc6afa03d69cb2f0e11e859d
- MD5 d571e9bc8fd22254b4dce3df71a2e0ba
- SHA1 20f210aa57bb86a97a9d851ed24bbb906e6be544
- SHA512 fe1cf5c8881a0c59af9f22650ed2e05f59acfd8984587b35626012b3b8cee777a7288aa40cfe2cdb347f2207a44b4a45c36e9e5e0b29ae5e9e59b9c49563d0b0
- SSDEEP 98304:9Qn7WCGv5f4+7C9tPNM8BIOgio1AWCgio1AWGaYrPwRcnWBT64bDR7nq1MidlelZ:9oix8jPTB3ILCILGaYroz84bVDqHl5q
- TLSH T11B16338A0BA9152CE1D0C8B07A97FCF487B42A5F791CDC5BCD5929F6027BE9275128F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_d571e9bc8fd22254b4dce3df71a2e0ba_elex_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_d571e9bc8fd22254b4dce3df71a2e0ba_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_d571e9bc8fd22254b4dce3df71a2e0ba_elex_wannacry
- Size 4.2MB
- SHA256 6eb407c2d76898d0bdfb1f23e0e02656acebe833bc6afa03d69cb2f0e11e859d
- MD5 d571e9bc8fd22254b4dce3df71a2e0ba
- SHA1 20f210aa57bb86a97a9d851ed24bbb906e6be544
- SHA512 fe1cf5c8881a0c59af9f22650ed2e05f59acfd8984587b35626012b3b8cee777a7288aa40cfe2cdb347f2207a44b4a45c36e9e5e0b29ae5e9e59b9c49563d0b0
- SSDEEP 98304:9Qn7WCGv5f4+7C9tPNM8BIOgio1AWCgio1AWGaYrPwRcnWBT64bDR7nq1MidlelZ:9oix8jPTB3ILCILGaYroz84bVDqHl5q
- TLSH T11B16338A0BA9152CE1D0C8B07A97FCF487B42A5F791CDC5BCD5929F6027BE9275128F0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound
Network activity triggered a Suricata alert
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1