General
- Target 2026-07-17_cb229b7b9adc619c06d96b1f93d04573_elex_wannacry
- Size 64KB
- Sample260718-ch143scx9k
- SHA256 83f6e7e6fffda4eb8c0a065269fb1208709a048f75d63d138e90615b2332d718
- MD5 cb229b7b9adc619c06d96b1f93d04573
- SHA1 890ebced1c0bc30a57379d3bbcb0de2650367568
- SHA512 6fd1b7c0396a23a239670f1fe050ce7305e7927a8d35efa22fcb302b4195b9bc0fde85f6f21c72fa768e0a8280e988b07a9e5a2f4cf09f62a38685f47b02ffc1
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwEM5Y04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroNL4/CFsrdT
- TLSH T1D153414A269544A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-17_cb229b7b9adc619c06d96b1f93d04573_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_cb229b7b9adc619c06d96b1f93d04573_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_cb229b7b9adc619c06d96b1f93d04573_elex_wannacry
- Size 64KB
- SHA256 83f6e7e6fffda4eb8c0a065269fb1208709a048f75d63d138e90615b2332d718
- MD5 cb229b7b9adc619c06d96b1f93d04573
- SHA1 890ebced1c0bc30a57379d3bbcb0de2650367568
- SHA512 6fd1b7c0396a23a239670f1fe050ce7305e7927a8d35efa22fcb302b4195b9bc0fde85f6f21c72fa768e0a8280e988b07a9e5a2f4cf09f62a38685f47b02ffc1
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwEM5Y04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroNL4/CFsrdT
- TLSH T1D153414A269544A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE