General
- Target 2026-07-27_d011a26cd4b5be07c69afc5816fe261a_elex_wannacry
- Size 68KB
- Sample260727-jrl5vabl6v
- SHA256 76ada0297b078cd2633ac530b4f3813b9803b856494b756e0e91dc8222e2455d
- MD5 d011a26cd4b5be07c69afc5816fe261a
- SHA1 64123676ea4ba1923882639ac77078600593582b
- SHA512 cc2bcd0f0bb50e70074b0e666af303e27c2b49131c32e67101723b79c502d2a06a68b4cf846cace8bbcb5b1e30b193166c5a8226adc7e568016769630dbe4c8a
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqwEt5Y04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLro8L4/CFsrdU
- TLSH T148633A4306BD7CF3E54B293028A445744DE667C06209E9BB7FECD90BE02B96D9CAD186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_d011a26cd4b5be07c69afc5816fe261a_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_d011a26cd4b5be07c69afc5816fe261a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_d011a26cd4b5be07c69afc5816fe261a_elex_wannacry
- Size 68KB
- SHA256 76ada0297b078cd2633ac530b4f3813b9803b856494b756e0e91dc8222e2455d
- MD5 d011a26cd4b5be07c69afc5816fe261a
- SHA1 64123676ea4ba1923882639ac77078600593582b
- SHA512 cc2bcd0f0bb50e70074b0e666af303e27c2b49131c32e67101723b79c502d2a06a68b4cf846cace8bbcb5b1e30b193166c5a8226adc7e568016769630dbe4c8a
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqwEt5Y04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLro8L4/CFsrdU
- TLSH T148633A4306BD7CF3E54B293028A445744DE667C06209E9BB7FECD90BE02B96D9CAD186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE