General
- Target 2026-07-28_e41f1249d1a8de40a2735d8b45f42ffc_elex_wannacry
- Size 64KB
- Sample260728-csrcmaxsb1
- SHA256 3300c1f924d696e423c68ccf50e02a5f538d342258e416d32b0a0b9ddac54e9d
- MD5 e41f1249d1a8de40a2735d8b45f42ffc
- SHA1 890be35251133be9e77a3661bf78385c517582e3
- SHA512 949d5ff42e59a1d7623a9eb6d57c9e02a0db8cc954dbfc45d57d99c8a0b5de76a350513a3be2e89a3125a68f3dbe622f08c92d6b706640d233ae5d73e790d731
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroQ4/CFsrdn0A9lsy4:vvw9816vhKQLroQ4/wQH9lsl
- TLSH T100535C834BEE98F2F7D21131046D8AB99277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-28_e41f1249d1a8de40a2735d8b45f42ffc_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_e41f1249d1a8de40a2735d8b45f42ffc_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_e41f1249d1a8de40a2735d8b45f42ffc_elex_wannacry
- Size 64KB
- SHA256 3300c1f924d696e423c68ccf50e02a5f538d342258e416d32b0a0b9ddac54e9d
- MD5 e41f1249d1a8de40a2735d8b45f42ffc
- SHA1 890be35251133be9e77a3661bf78385c517582e3
- SHA512 949d5ff42e59a1d7623a9eb6d57c9e02a0db8cc954dbfc45d57d99c8a0b5de76a350513a3be2e89a3125a68f3dbe622f08c92d6b706640d233ae5d73e790d731
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroQ4/CFsrdn0A9lsy4:vvw9816vhKQLroQ4/wQH9lsl
- TLSH T100535C834BEE98F2F7D21131046D8AB99277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE