General
- Target 2026-07-28_7f84082c6b2417f6d92e72788a59d9a1_elex_wannacry
- Size 60KB
- Sample260728-ctl5asee69
- SHA256 5f0d14ef4e6fd638e8a3da7e6887289d5a7359ff0c9defc91dd89fe12c7047a9
- MD5 7f84082c6b2417f6d92e72788a59d9a1
- SHA1 7e77f2c0d90efd18fe6ab35642e767da01a65f8d
- SHA512 32e820489a027aea3043b41c9f14cca02dc239a336ee9a17802782271e8bd5a338c1c7eaea394f3997df3df282648ee405c8f94aa9ac6e30878eefbe4deb71a0
- SSDEEP 192:XbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwQY04/CFxyNhoy5t:XbLwOs8AHsc4sMfwhKQLro+4/CFsrd
- TLSH T1B6530A834BDE9CF2F791127108794AB9927B99C4910EBE9FBF90CD540037692E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-28_7f84082c6b2417f6d92e72788a59d9a1_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_7f84082c6b2417f6d92e72788a59d9a1_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_7f84082c6b2417f6d92e72788a59d9a1_elex_wannacry
- Size 60KB
- SHA256 5f0d14ef4e6fd638e8a3da7e6887289d5a7359ff0c9defc91dd89fe12c7047a9
- MD5 7f84082c6b2417f6d92e72788a59d9a1
- SHA1 7e77f2c0d90efd18fe6ab35642e767da01a65f8d
- SHA512 32e820489a027aea3043b41c9f14cca02dc239a336ee9a17802782271e8bd5a338c1c7eaea394f3997df3df282648ee405c8f94aa9ac6e30878eefbe4deb71a0
- SSDEEP 192:XbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwQY04/CFxyNhoy5t:XbLwOs8AHsc4sMfwhKQLro+4/CFsrd
- TLSH T1B6530A834BDE9CF2F791127108794AB9927B99C4910EBE9FBF90CD540037692E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE