General
- Target 2026-07-27_a3b955f718ce81ad98b7745b596c621a_elex_wannacry
- Size 389KB
- Sample260727-ynw8zach98
- SHA256 45080a1783deee737af03987bd8aabbcf49f4998673961bb87201fed52619666
- MD5 a3b955f718ce81ad98b7745b596c621a
- SHA1 b3794247f13c9ab9f5e79c0d1af99c587dbb4ff2
- SHA512 e2d5b9d33a9bb96bd00a04684979040be22dc1be9d5e1d690954aab2a83e0486bb9de265b89b9cb88c0ea12d05c89c27bfa1664d4bff10024337ae25717a077d
- SSDEEP 3072:NGC43DkTv+XZZpH000000000000000000000000000000000000000000000000l:NGC43pZP
- TLSH T12684C6E47AC25363CB411670E00F0F78627E60DB805E9065A7F39B5697782199EEC2BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_a3b955f718ce81ad98b7745b596c621a_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_a3b955f718ce81ad98b7745b596c621a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_a3b955f718ce81ad98b7745b596c621a_elex_wannacry
- Size 389KB
- SHA256 45080a1783deee737af03987bd8aabbcf49f4998673961bb87201fed52619666
- MD5 a3b955f718ce81ad98b7745b596c621a
- SHA1 b3794247f13c9ab9f5e79c0d1af99c587dbb4ff2
- SHA512 e2d5b9d33a9bb96bd00a04684979040be22dc1be9d5e1d690954aab2a83e0486bb9de265b89b9cb88c0ea12d05c89c27bfa1664d4bff10024337ae25717a077d
- SSDEEP 3072:NGC43DkTv+XZZpH000000000000000000000000000000000000000000000000l:NGC43pZP
- TLSH T12684C6E47AC25363CB411670E00F0F78627E60DB805E9065A7F39B5697782199EEC2BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Disables RegEdit via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook accounts
-
Drops file in System32 directory