General
- Target 2026-07-27_428f57645859cec8bdc3e1bed5fe1750_elex_wannacry
- Size 18KB
- Sample260727-2vvkhadf89
- SHA256 5d5554734286accb5736ae4be4dfc831f758a7a31d5b77dc124e819d877c8f88
- MD5 428f57645859cec8bdc3e1bed5fe1750
- SHA1 c964b617c0bc2b229c5eb8a3efdc5684beaa8a5f
- SHA512 9f1dcb2a1b86d3a1188bf4d160cec42225b3d8dd85a7bfc667f92fd5934264a4bc64486d9202bfc4e64c299307ee78ada3feef9940e2dd5970e9d8eebd8f1943
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6p:uTQWckBeEd6ml1pcg7F3GiElpd2y
- TLSH T19282A6356BE55D73E3BBDBB196F7C1D66975742B2E03992E80481B882833E10DC60F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_428f57645859cec8bdc3e1bed5fe1750_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_428f57645859cec8bdc3e1bed5fe1750_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_428f57645859cec8bdc3e1bed5fe1750_elex_wannacry
- Size 18KB
- SHA256 5d5554734286accb5736ae4be4dfc831f758a7a31d5b77dc124e819d877c8f88
- MD5 428f57645859cec8bdc3e1bed5fe1750
- SHA1 c964b617c0bc2b229c5eb8a3efdc5684beaa8a5f
- SHA512 9f1dcb2a1b86d3a1188bf4d160cec42225b3d8dd85a7bfc667f92fd5934264a4bc64486d9202bfc4e64c299307ee78ada3feef9940e2dd5970e9d8eebd8f1943
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6p:uTQWckBeEd6ml1pcg7F3GiElpd2y
- TLSH T19282A6356BE55D73E3BBDBB196F7C1D66975742B2E03992E80481B882833E10DC60F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE