General
- Target 2026-07-28_58fa8158d5341d1e4cfc018c2c8bb7ee_elex_wannacry
- Size 60KB
- Sample260728-2xqdkabm4x
- SHA256 1a958a08a3e2ca78fbe7d087602f64f8e0b814fa79f302e71ce2d177a95e953c
- MD5 58fa8158d5341d1e4cfc018c2c8bb7ee
- SHA1 3bf3777b4f1862b8d5be35809be84ecce89a0015
- SHA512 3cb0f531c1c36348ee138af06a42b517ef6688e1748a047e84f819cac20945e822892bda82e601b311efd921a8acf781af1683b41651a08ea2424a76aca9587f
- SSDEEP 768:OrItKyw5WHXfQmjIiIk9ecAa6cMb964yXhDLdH:Or3Z5IfQmv81awvyX5ZH
- TLSH T1A7532A87EB91516AE41B4038145367B6ACF32CB5890F5522FF90BE4F3CF8A45B925D43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-28_58fa8158d5341d1e4cfc018c2c8bb7ee_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_58fa8158d5341d1e4cfc018c2c8bb7ee_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_58fa8158d5341d1e4cfc018c2c8bb7ee_elex_wannacry
- Size 60KB
- SHA256 1a958a08a3e2ca78fbe7d087602f64f8e0b814fa79f302e71ce2d177a95e953c
- MD5 58fa8158d5341d1e4cfc018c2c8bb7ee
- SHA1 3bf3777b4f1862b8d5be35809be84ecce89a0015
- SHA512 3cb0f531c1c36348ee138af06a42b517ef6688e1748a047e84f819cac20945e822892bda82e601b311efd921a8acf781af1683b41651a08ea2424a76aca9587f
- SSDEEP 768:OrItKyw5WHXfQmjIiIk9ecAa6cMb964yXhDLdH:Or3Z5IfQmv81awvyX5ZH
- TLSH T1A7532A87EB91516AE41B4038145367B6ACF32CB5890F5522FF90BE4F3CF8A45B925D43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.