General
- Target 2026-07-28_2e21a1595e384c15c8657e00dda5729d_elex_wannacry
- Size 67KB
- Sample260729-bypkjs1gre
- SHA256 9ff8bd65040e90feba6eded8efd548cd0880f89cb02296ace0e99c5a8e2e76ce
- MD5 2e21a1595e384c15c8657e00dda5729d
- SHA1 d5cd175c41c429ec04a0b567643dcd7be98cbfae
- SHA512 ee2da9351ff671d17924d36e3687116f11584f54bdb4c5933d7c7a64e29899a9a1776ff9e58fee489ee42d42caafa73df638d5149ccfd044175eedbd374e9e3b
- SSDEEP 768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyXmbrrrrcSSSs:Zr3Z5IfQIR81ad5yXmgSSSs
- TLSH T15D63E6C7AA8191A2D8134C3715D263BE5CA23C34084E5C22AEF3DD8EECABB317516943
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-28_2e21a1595e384c15c8657e00dda5729d_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_2e21a1595e384c15c8657e00dda5729d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_2e21a1595e384c15c8657e00dda5729d_elex_wannacry
- Size 67KB
- SHA256 9ff8bd65040e90feba6eded8efd548cd0880f89cb02296ace0e99c5a8e2e76ce
- MD5 2e21a1595e384c15c8657e00dda5729d
- SHA1 d5cd175c41c429ec04a0b567643dcd7be98cbfae
- SHA512 ee2da9351ff671d17924d36e3687116f11584f54bdb4c5933d7c7a64e29899a9a1776ff9e58fee489ee42d42caafa73df638d5149ccfd044175eedbd374e9e3b
- SSDEEP 768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyXmbrrrrcSSSs:Zr3Z5IfQIR81ad5yXmgSSSs
- TLSH T15D63E6C7AA8191A2D8134C3715D263BE5CA23C34084E5C22AEF3DD8EECABB317516943
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.