General
- Target 2026-07-18_5bf5daa19b612d074a38810afbf7af25_elex_wannacry
- Size 503KB
- Sample260718-jrh37ags9w
- SHA256 693fa5883a0142f82936d9332410aea28fff3c17ef2f5c07c281c6d09f361222
- MD5 5bf5daa19b612d074a38810afbf7af25
- SHA1 9988494584d92fbd5926ceaa5fcc24a9cfaf36c9
- SHA512 c10fc51d59895b9c92d97c4e0346844238b38e94f0e8273ada7448e306ad64d1c3276a49c3b80e3260d360374753b7b917ae96295e70cc22ff3e31df6f1937f9
- SSDEEP 6144:gCEDoGcmpvpLWHUBwzoQSYdz8KcwdLl/2x9h3HYzLKy8iKUBmDE8TX0iBz2HRd5s:BmtMHUIV8edMx9hIPpv+TX0iuRU
- TLSH T1FBB4F9790B13106EECE139B8819DAE99C3645F921D36249F31AFC0D3A4B7C63D96E316
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_5bf5daa19b612d074a38810afbf7af25_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_5bf5daa19b612d074a38810afbf7af25_elex_wannacry
- Size 503KB
- SHA256 693fa5883a0142f82936d9332410aea28fff3c17ef2f5c07c281c6d09f361222
- MD5 5bf5daa19b612d074a38810afbf7af25
- SHA1 9988494584d92fbd5926ceaa5fcc24a9cfaf36c9
- SHA512 c10fc51d59895b9c92d97c4e0346844238b38e94f0e8273ada7448e306ad64d1c3276a49c3b80e3260d360374753b7b917ae96295e70cc22ff3e31df6f1937f9
- SSDEEP 6144:gCEDoGcmpvpLWHUBwzoQSYdz8KcwdLl/2x9h3HYzLKy8iKUBmDE8TX0iBz2HRd5s:BmtMHUIV8edMx9hIPpv+TX0iuRU
- TLSH T1FBB4F9790B13106EECE139B8819DAE99C3645F921D36249F31AFC0D3A4B7C63D96E316
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with aPLib.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of SetThreadContext