General
- Target 2026-07-17_89485a5f698d3f4c0424b5c80ed8a8c8_elex_wannacry
- Size 68KB
- Sample260718-djs1jaes3n
- SHA256 d4c04820c0243f1c838f53d7b85295d09e946b5d2d4d9579601cdc3b38ceeb21
- MD5 89485a5f698d3f4c0424b5c80ed8a8c8
- SHA1 6c4bb4a4061e5be20c3fe6693953c48f21e5ff83
- SHA512 1e7c4d9130822ff79743e26ab1b721a9d23a6c4acf19c859070d6e688be4dca8a9c61a0d5721777a6ee877017a3e926b1d0d147276bb22d9ecf844d988556132
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqwxY04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLroD4/CFsrdU
- TLSH T115632B4306BD7CF3E54B293028A445744DE667C06209E9BB7FECD90BE02B96D9CED186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-17_89485a5f698d3f4c0424b5c80ed8a8c8_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_89485a5f698d3f4c0424b5c80ed8a8c8_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_89485a5f698d3f4c0424b5c80ed8a8c8_elex_wannacry
- Size 68KB
- SHA256 d4c04820c0243f1c838f53d7b85295d09e946b5d2d4d9579601cdc3b38ceeb21
- MD5 89485a5f698d3f4c0424b5c80ed8a8c8
- SHA1 6c4bb4a4061e5be20c3fe6693953c48f21e5ff83
- SHA512 1e7c4d9130822ff79743e26ab1b721a9d23a6c4acf19c859070d6e688be4dca8a9c61a0d5721777a6ee877017a3e926b1d0d147276bb22d9ecf844d988556132
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqwxY04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLroD4/CFsrdU
- TLSH T115632B4306BD7CF3E54B293028A445744DE667C06209E9BB7FECD90BE02B96D9CED186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE