General
- Target 2026-07-29_eb8fdca9f7619dfd39aa052dc60982b2_elex_wannacry
- Size 60KB
- Sample260729-mf821sff84
- SHA256 3e207504184c97f6ab5a3d366d2d1062ddc095e2ecafd693d0f3493d9a547e43
- MD5 eb8fdca9f7619dfd39aa052dc60982b2
- SHA1 1bedcb24eab3218e0fc31a7f56883d096d4246ed
- SHA512 233c5ac040ff081df6bdf3803d52103bd390de984470d537c98b3608e4149b938a6233144e8d99b430be80022d148a416b4c618bbf6596d3ff5fa1b68aa237f5
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE5Y04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroW4/CFsrd/
- TLSH T1C85318834BDE9CF2FB91113108794BB9927B99D4910EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_eb8fdca9f7619dfd39aa052dc60982b2_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_eb8fdca9f7619dfd39aa052dc60982b2_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_eb8fdca9f7619dfd39aa052dc60982b2_elex_wannacry
- Size 60KB
- SHA256 3e207504184c97f6ab5a3d366d2d1062ddc095e2ecafd693d0f3493d9a547e43
- MD5 eb8fdca9f7619dfd39aa052dc60982b2
- SHA1 1bedcb24eab3218e0fc31a7f56883d096d4246ed
- SHA512 233c5ac040ff081df6bdf3803d52103bd390de984470d537c98b3608e4149b938a6233144e8d99b430be80022d148a416b4c618bbf6596d3ff5fa1b68aa237f5
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE5Y04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroW4/CFsrd/
- TLSH T1C85318834BDE9CF2FB91113108794BB9927B99D4910EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE