General
- Target 2026-07-24_4da5ce27e55234b98bb3ebde4a00d217_elex_wannacry
- Size 80KB
- Sample260724-lf2r9sxalg
- SHA256 c5254ad48727f79a34ae1c060cb4490c87068ea07bfed8e706241c379995a112
- MD5 4da5ce27e55234b98bb3ebde4a00d217
- SHA1 6331f8282a7ab42b0f05b5e5626bcadb91fb394b
- SHA512 4366824223476e31c7a08c0795f36c5f41070063eca2041c787b7642c69620d9226abfa7290d8d86c325265117d4a6ea568aa64262b235dd867c1d6c511a3bc1
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLro84/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLro84/wQRNrfrunMxVFAi
- TLSH T14C83C43E5DDA1037E2B3D6B585F12AE7FE66B98339091D0E46D243528D23B43AC86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-24_4da5ce27e55234b98bb3ebde4a00d217_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_4da5ce27e55234b98bb3ebde4a00d217_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_4da5ce27e55234b98bb3ebde4a00d217_elex_wannacry
- Size 80KB
- SHA256 c5254ad48727f79a34ae1c060cb4490c87068ea07bfed8e706241c379995a112
- MD5 4da5ce27e55234b98bb3ebde4a00d217
- SHA1 6331f8282a7ab42b0f05b5e5626bcadb91fb394b
- SHA512 4366824223476e31c7a08c0795f36c5f41070063eca2041c787b7642c69620d9226abfa7290d8d86c325265117d4a6ea568aa64262b235dd867c1d6c511a3bc1
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLro84/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLro84/wQRNrfrunMxVFAi
- TLSH T14C83C43E5DDA1037E2B3D6B585F12AE7FE66B98339091D0E46D243528D23B43AC86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE