General
- Target 2026-07-27_54ae38b67777b8ed43a0333dd4d9ba99_elex_wannacry
- Size 84KB
- Sample260727-pepcbsag64
- SHA256 6ee0fb86bd499e43d8a0354a11d7c6e797c45a09fc2e0a974a0516d5727e3cb8
- MD5 54ae38b67777b8ed43a0333dd4d9ba99
- SHA1 9a97a6af25016d42a086266c64b1509563415ae0
- SHA512 c462ab3cdad1f07bfc8bbcc8dbad6d902b057aa72ab6628f5e7fc0f1f8c7bbff4b2ad2e589ea715eebf15a00b3e339482cab6f86fb9ea25d922e73c51a6c877a
- SSDEEP 768:svw9816vhKQLrof4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0ofllZCJvCJXX0SCJXuev
- TLSH T12E830A5372DC5CF3F1A623382973AF674D42BB90050A3B525AC08A8F499D9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_54ae38b67777b8ed43a0333dd4d9ba99_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_54ae38b67777b8ed43a0333dd4d9ba99_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_54ae38b67777b8ed43a0333dd4d9ba99_elex_wannacry
- Size 84KB
- SHA256 6ee0fb86bd499e43d8a0354a11d7c6e797c45a09fc2e0a974a0516d5727e3cb8
- MD5 54ae38b67777b8ed43a0333dd4d9ba99
- SHA1 9a97a6af25016d42a086266c64b1509563415ae0
- SHA512 c462ab3cdad1f07bfc8bbcc8dbad6d902b057aa72ab6628f5e7fc0f1f8c7bbff4b2ad2e589ea715eebf15a00b3e339482cab6f86fb9ea25d922e73c51a6c877a
- SSDEEP 768:svw9816vhKQLrof4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0ofllZCJvCJXX0SCJXuev
- TLSH T12E830A5372DC5CF3F1A623382973AF674D42BB90050A3B525AC08A8F499D9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE