General
- Target 2026-07-22_4577259e700af15e45c8353677eb462b_elex_wannacry
- Size 12.4MB
- Sample260722-whfypa1clf
- SHA256 f2e78d9acd40fb8b4b9ff4155511fc69bea671dc2c3a04c89489c01046fc1a0a
- MD5 4577259e700af15e45c8353677eb462b
- SHA1 f06eb65d09fa9b5b73bcf2d28420482458d77f8c
- SHA512 aa563161098050d2c6777a582addf4deac0e380ea31176d1451febc687965f81b2a8a3730bb8aa23ebe5df0ef823a3717bf176f1519243368d1fdcc3dd6b62cd
- SSDEEP 393216:uyHbSM2RIgOJ9D73354LUQ/1rM7VUhVQFCfzoFYqK:uIeM26J9KLZaCV7oFYqK
- TLSH T18AD63306D644906BEEF95FB8B03C873DEED8E74A6703FF3E82A6E66D73480196005525
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_4577259e700af15e45c8353677eb462b_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_4577259e700af15e45c8353677eb462b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_4577259e700af15e45c8353677eb462b_elex_wannacry
- Size 12.4MB
- SHA256 f2e78d9acd40fb8b4b9ff4155511fc69bea671dc2c3a04c89489c01046fc1a0a
- MD5 4577259e700af15e45c8353677eb462b
- SHA1 f06eb65d09fa9b5b73bcf2d28420482458d77f8c
- SHA512 aa563161098050d2c6777a582addf4deac0e380ea31176d1451febc687965f81b2a8a3730bb8aa23ebe5df0ef823a3717bf176f1519243368d1fdcc3dd6b62cd
- SSDEEP 393216:uyHbSM2RIgOJ9D73354LUQ/1rM7VUhVQFCfzoFYqK:uIeM26J9KLZaCV7oFYqK
- TLSH T18AD63306D644906BEEF95FB8B03C873DEED8E74A6703FF3E82A6E66D73480196005525
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Event Triggered Execution: Image File Execution Options Injection
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE