General
- Target 2026-07-20_b85666bfa80905805d5e20aee0ecd279_elex_wannacry
- Size 64KB
- Sample260720-negf2sav2z
- SHA256 10b9e289ed239b4c8c75e3c7a11fe677af8182bec9c9f92eadb223539d1100e1
- MD5 b85666bfa80905805d5e20aee0ecd279
- SHA1 ed77a027379094eefa697609f6162705830f78b9
- SHA512 223db07ddce81bf8ddb324d3cdc94ece67d5c1f95b1e6e71f0946cf42dd5b66a10efa9e5afaf0a78ad4c1b579358ccc279a2b19036fad03ab5b817b33081e1d3
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw8Y04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroK4/CFsrd
- TLSH T18F5318834BDE9CF2F791117108798BB9927B99D4910EBEDFAF90CD150077292E93A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_b85666bfa80905805d5e20aee0ecd279_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b85666bfa80905805d5e20aee0ecd279_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b85666bfa80905805d5e20aee0ecd279_elex_wannacry
- Size 64KB
- SHA256 10b9e289ed239b4c8c75e3c7a11fe677af8182bec9c9f92eadb223539d1100e1
- MD5 b85666bfa80905805d5e20aee0ecd279
- SHA1 ed77a027379094eefa697609f6162705830f78b9
- SHA512 223db07ddce81bf8ddb324d3cdc94ece67d5c1f95b1e6e71f0946cf42dd5b66a10efa9e5afaf0a78ad4c1b579358ccc279a2b19036fad03ab5b817b33081e1d3
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw8Y04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroK4/CFsrd
- TLSH T18F5318834BDE9CF2F791117108798BB9927B99D4910EBEDFAF90CD150077292E93A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE