General
- Target 2026-07-27_cff1f5ab07b25c36bd9db3274eadef47_elex_wannacry
- Size 23KB
- Sample260727-2nnhlssfmc
- SHA256 913cc41241602f881c8161addc36a4f7a3de6b595cd30494344cc23d9c7c45c7
- MD5 cff1f5ab07b25c36bd9db3274eadef47
- SHA1 6c249f49a344a7293169115bcfe16b0d7bc4979b
- SHA512 9df85fb1c1d700f5a504e21f41894fbcdb780ad9a7ab1645a5e3a2ba86d30b274d7868cc8a071c14bb033ceb3902d5ffeaa4c8c55764ad976569ea417c5e405d
- SSDEEP 384:cJriYZkQ8a+2MjJV0M7ZRPY9hYNoo5vJIUEc6slHO78Y1gThwxS:VYZzA6Ymo9uUE204CA9
- TLSH T1ACB242DBF5C81D8DF10D4130A57A9635C66A88244C40A49AC7F0D7EBAFA8D84AF86F47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_cff1f5ab07b25c36bd9db3274eadef47_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_cff1f5ab07b25c36bd9db3274eadef47_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_cff1f5ab07b25c36bd9db3274eadef47_elex_wannacry
- Size 23KB
- SHA256 913cc41241602f881c8161addc36a4f7a3de6b595cd30494344cc23d9c7c45c7
- MD5 cff1f5ab07b25c36bd9db3274eadef47
- SHA1 6c249f49a344a7293169115bcfe16b0d7bc4979b
- SHA512 9df85fb1c1d700f5a504e21f41894fbcdb780ad9a7ab1645a5e3a2ba86d30b274d7868cc8a071c14bb033ceb3902d5ffeaa4c8c55764ad976569ea417c5e405d
- SSDEEP 384:cJriYZkQ8a+2MjJV0M7ZRPY9hYNoo5vJIUEc6slHO78Y1gThwxS:VYZzA6Ymo9uUE204CA9
- TLSH T1ACB242DBF5C81D8DF10D4130A57A9635C66A88244C40A49AC7F0D7EBAFA8D84AF86F47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.