General
- Target 2026-07-28_bf1e05caf131b63de1a32e0c54993a0b_elex_wannacry
- Size 64KB
- Sample260728-tagh5syhrb
- SHA256 ec913d333c6c190470c77d0de568f3061a58e982943547751a37fd248bd987a3
- MD5 bf1e05caf131b63de1a32e0c54993a0b
- SHA1 c2b9e6da41c83649c403dc101939704c072940b6
- SHA512 54cfe624a2d875c69735668040232c54987d0f05037ad1edc1268bc421a3c7e02d4a56d18160c6402732fcdfb5e888d01650fe5a561ea8b26ef10116fb6aa35b
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw4jY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLro4l4/CFsrdT
- TLSH T16253414A269554A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-28_bf1e05caf131b63de1a32e0c54993a0b_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_bf1e05caf131b63de1a32e0c54993a0b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_bf1e05caf131b63de1a32e0c54993a0b_elex_wannacry
- Size 64KB
- SHA256 ec913d333c6c190470c77d0de568f3061a58e982943547751a37fd248bd987a3
- MD5 bf1e05caf131b63de1a32e0c54993a0b
- SHA1 c2b9e6da41c83649c403dc101939704c072940b6
- SHA512 54cfe624a2d875c69735668040232c54987d0f05037ad1edc1268bc421a3c7e02d4a56d18160c6402732fcdfb5e888d01650fe5a561ea8b26ef10116fb6aa35b
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw4jY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLro4l4/CFsrdT
- TLSH T16253414A269554A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE