General
- Target 2026-07-22_2fcf0158d6bcac844b08e4d7eab9fde5_elex_wannacry
- Size 320KB
- Sample260723-ag2ccabk9t
- SHA256 42331d090f34446d295ebbcb2277b82e71b8bf5dbcb2699055e3b79da3ee55ad
- MD5 2fcf0158d6bcac844b08e4d7eab9fde5
- SHA1 bd98b348526740999a433e7c92336bc13f7c52de
- SHA512 880f571de3cd039ffecbc576e953856e63d90642302da02d710c02bb85fdbceb464d1b574291fa6201f389c8739191a35e60cc6b9fd138329b6ae7dab0a94d6f
- SSDEEP 3072:fDEGh0o8lZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEG6lnOe2MUVg3vdeKcAEjy
- TLSH T16564A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-22_2fcf0158d6bcac844b08e4d7eab9fde5_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_2fcf0158d6bcac844b08e4d7eab9fde5_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_2fcf0158d6bcac844b08e4d7eab9fde5_elex_wannacry
- Size 320KB
- SHA256 42331d090f34446d295ebbcb2277b82e71b8bf5dbcb2699055e3b79da3ee55ad
- MD5 2fcf0158d6bcac844b08e4d7eab9fde5
- SHA1 bd98b348526740999a433e7c92336bc13f7c52de
- SHA512 880f571de3cd039ffecbc576e953856e63d90642302da02d710c02bb85fdbceb464d1b574291fa6201f389c8739191a35e60cc6b9fd138329b6ae7dab0a94d6f
- SSDEEP 3072:fDEGh0o8lZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEG6lnOe2MUVg3vdeKcAEjy
- TLSH T16564A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE