General
- Target 2026-07-27_ee13df39b2eba9128dd545908fe13abf_elex_wannacry
- Size 68KB
- Sample260727-ttpnvswhjb
- SHA256 c147ad9164b69cbb86c13de9cfbc16be496797199a3e6028dac830191b6b4b2c
- MD5 ee13df39b2eba9128dd545908fe13abf
- SHA1 b8501bd9b75c3a83552ec12f50dd7e9e0330ee5d
- SHA512 0b317ec6803f6d7eba5f6a87ad4e0932de1a3caf593de6b693ca5212daab4aeb73ac08f5a378d3730cfdefbbe72c2dfb39d9007bb03c4e2964c10f53a66c1724
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqwKY04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLrog4/CFsrdU
- TLSH T196632B4306BD7CF3E54B293028A445744DE667C07209E97B7FECD90BE02B96D9CAD186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_ee13df39b2eba9128dd545908fe13abf_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_ee13df39b2eba9128dd545908fe13abf_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_ee13df39b2eba9128dd545908fe13abf_elex_wannacry
- Size 68KB
- SHA256 c147ad9164b69cbb86c13de9cfbc16be496797199a3e6028dac830191b6b4b2c
- MD5 ee13df39b2eba9128dd545908fe13abf
- SHA1 b8501bd9b75c3a83552ec12f50dd7e9e0330ee5d
- SHA512 0b317ec6803f6d7eba5f6a87ad4e0932de1a3caf593de6b693ca5212daab4aeb73ac08f5a378d3730cfdefbbe72c2dfb39d9007bb03c4e2964c10f53a66c1724
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqwKY04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLrog4/CFsrdU
- TLSH T196632B4306BD7CF3E54B293028A445744DE667C07209E97B7FECD90BE02B96D9CAD186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE