Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/07/2026, 09:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_2eb8c30ff5cb9256bfea8663cc9af8c3_elex_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_2eb8c30ff5cb9256bfea8663cc9af8c3_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-07-29_2eb8c30ff5cb9256bfea8663cc9af8c3_elex_wannacry.exe
- Size 48KB
- Sample260729-ll2z8a1bmc
- SHA256 a96d2835eb6b124bc6780aa7c9f1c5e8a040499fa06e7c310e2521c0318bcdfb
- MD5 2eb8c30ff5cb9256bfea8663cc9af8c3
- SHA1 d58c979071462fa0e07152316d93a350c8e95046
- SHA512 955492e42d4960c0f4fa3db3085f4ffe730fdc063f0c925e238412f4e3187f0e7792c9151586bb524dd4a642dc149a535d0fa091a8824207a359feb6d8ff3499
- SSDEEP 192:4obAYDVD9xIPpq/hplLOplCUP1oynTvZjjGgNghhJ:lb7xxnt61ZvBjchh
- TLSH T18523844E891748A3E4519D7097E706F98FBCAC13369221AFDF19EE8CA9702084553AB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-29_2eb8c30ff5cb9256bfea8663cc9af8c3_elex_wannacry.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4124 2026-07-29_2eb8c30ff5cb9256bfea8663cc9af8c3_elex_wannacry.exe 4124 2026-07-29_2eb8c30ff5cb9256bfea8663cc9af8c3_elex_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-29_2eb8c30ff5cb9256bfea8663cc9af8c3_elex_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-29_2eb8c30ff5cb9256bfea8663cc9af8c3_elex_wannacry.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4124