Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/07/2026, 19:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe
- Size 4.6MB
- Sample260724-yah47assbw
- SHA256 b8766f60a4d4fb279e6c1bc7fb064d5df32743bc68bd7238eae45c883a9d315a
- MD5 3415c112d239dd0ad7da8d98eed89abc
- SHA1 1dae8281ea23f7a83cd179acb870e4f3d8ab6d88
- SHA512 ea8994b708d490f60d4aa425de9695d6e108c72f2deaa9cb96bfe7aa0a1cb6ab83206dd668f21f6cf30caec9c2588c0eb114b3588c2adb290e7b6531b7e1c296
- SSDEEP 3072:f0WfyFJy3Cj2bCpVre7AVuGpjH9YV2J/d8YNHlw4atTBfln6zGq:MTv+GxxjGVW/dlNHO4atTBpWG
- TLSH T1AD2629D8B7F5A367E840C8374FAD3235D2A1DC1219094A632B19AF3D9D3F40D7A8526E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe - Suspicious behavior: EnumeratesProcesses 50 IoCs
pid Process 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe 5144 2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-24_3415c112d239dd0ad7da8d98eed89abc_elex_wannacry.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:5144