General
- Target 2026-07-29_1c5a11b75ee121e2c627c04ebf2cfe54_elex_hijackloader_wannacry
- Size 57.9MB
- Sample260729-ebv1ladh72
- SHA256 3c95210df908c7a6e7a92bd9236231af5d84033f1846494eaf3c5dc820f0bc8d
- MD5 1c5a11b75ee121e2c627c04ebf2cfe54
- SHA1 b903174f1292beb479f31fb068fa64206cbca254
- SHA512 8872449934a97801cc3a626d2e952798e8a83f71bd80d00eea8400351eaf7a7c922a42106d45e5bb46af8ffad8a3f1d416c4f0efe56f8fdba835c0cb7fb9a470
- SSDEEP 1572864:HJ3EpWtdqs32r7u0lAzaWU8Puci2Du8/SLpa:p3qWtdqm+7ozPO2Du+SU
- TLSH T13CD733783D5B0F36C13B963DC81D1A1CEB87C85925D459D7F2331DA8A62844AC9BB28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-29_1c5a11b75ee121e2c627c04ebf2cfe54_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_1c5a11b75ee121e2c627c04ebf2cfe54_elex_hijackloader_wannacry
- Size 57.9MB
- SHA256 3c95210df908c7a6e7a92bd9236231af5d84033f1846494eaf3c5dc820f0bc8d
- MD5 1c5a11b75ee121e2c627c04ebf2cfe54
- SHA1 b903174f1292beb479f31fb068fa64206cbca254
- SHA512 8872449934a97801cc3a626d2e952798e8a83f71bd80d00eea8400351eaf7a7c922a42106d45e5bb46af8ffad8a3f1d416c4f0efe56f8fdba835c0cb7fb9a470
- SSDEEP 1572864:HJ3EpWtdqs32r7u0lAzaWU8Puci2Du8/SLpa:p3qWtdqm+7ozPO2Du+SU
- TLSH T13CD733783D5B0F36C13B963DC81D1A1CEB87C85925D459D7F2331DA8A62844AC9BB28F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.