General
- Target 2026-07-29_0872eaf545d673de8332f9a8613e5397_elex_wannacry
- Size 404KB
- Sample260729-1caxpsfb54
- SHA256 1cd6b6e462c64e5451bd828e10aa426b86ef462ac06a856f754793d3d8f57bb8
- MD5 0872eaf545d673de8332f9a8613e5397
- SHA1 081b507ec2fa5e6d5c67d81fc5950f765b756836
- SHA512 2d8c7bad32f5d964a988cb1e7f589fcc6c449b72a18829f00964b99ec0d13e6645db21e034e05d9d2145c623034de7eb29d9e14bae986a1e9f744bde2073cf94
- SSDEEP 3072:QoVDjW0LnX3XCIUkqHpFQr/8+IGpvoQRlNuFZKqY5cWrq/gf2EYAtN/v1grF3Wae:Z+0jX3ST/pQ/8amHBQ5m5Q//v1gr1
- TLSH T1F794AE373A34E7EEC94D02F929AD8AA51EE1CC724B70B2756CB9375DAEF32002D11255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_0872eaf545d673de8332f9a8613e5397_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_0872eaf545d673de8332f9a8613e5397_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_0872eaf545d673de8332f9a8613e5397_elex_wannacry
- Size 404KB
- SHA256 1cd6b6e462c64e5451bd828e10aa426b86ef462ac06a856f754793d3d8f57bb8
- MD5 0872eaf545d673de8332f9a8613e5397
- SHA1 081b507ec2fa5e6d5c67d81fc5950f765b756836
- SHA512 2d8c7bad32f5d964a988cb1e7f589fcc6c449b72a18829f00964b99ec0d13e6645db21e034e05d9d2145c623034de7eb29d9e14bae986a1e9f744bde2073cf94
- SSDEEP 3072:QoVDjW0LnX3XCIUkqHpFQr/8+IGpvoQRlNuFZKqY5cWrq/gf2EYAtN/v1grF3Wae:Z+0jX3ST/pQ/8amHBQ5m5Q//v1gr1
- TLSH T1F794AE373A34E7EEC94D02F929AD8AA51EE1CC724B70B2756CB9375DAEF32002D11255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.