General
- Target 2026-07-19_f6ebe4a6f96d3c00af4e783b171846e5_elex_wannacry
- Size 32KB
- Sample260719-nfmpfscw2x
- SHA256 dcd04b5d4830811646f5ce16efb7270074a0dd05e10858b92b2c521964e7d7c3
- MD5 f6ebe4a6f96d3c00af4e783b171846e5
- SHA1 72bc16a36142e665e13a5dd4bf539b896b98ff62
- SHA512 38763f888eeee953278426b6de0fa7d5073569abf36e7c150da175241f4a3388067dc9cd7b61ffb8bbb82111ce79fde7754847ccd37e8800a4b7a2ed9f151c08
- SSDEEP 192:uTq5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmAKLCAYV7/mjmTUsIO:uTKWckBeEd6ml1pcg7eMUUz62xK
- TLSH T1A9E261346BE51D73E3BBDBB586F7C1C66975B42A2E03991D80851B841833B11DCB0F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-19_f6ebe4a6f96d3c00af4e783b171846e5_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_f6ebe4a6f96d3c00af4e783b171846e5_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_f6ebe4a6f96d3c00af4e783b171846e5_elex_wannacry
- Size 32KB
- SHA256 dcd04b5d4830811646f5ce16efb7270074a0dd05e10858b92b2c521964e7d7c3
- MD5 f6ebe4a6f96d3c00af4e783b171846e5
- SHA1 72bc16a36142e665e13a5dd4bf539b896b98ff62
- SHA512 38763f888eeee953278426b6de0fa7d5073569abf36e7c150da175241f4a3388067dc9cd7b61ffb8bbb82111ce79fde7754847ccd37e8800a4b7a2ed9f151c08
- SSDEEP 192:uTq5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmAKLCAYV7/mjmTUsIO:uTKWckBeEd6ml1pcg7eMUUz62xK
- TLSH T1A9E261346BE51D73E3BBDBB586F7C1C66975B42A2E03991D80851B841833B11DCB0F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE