Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/07/2026, 11:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe
- Size 124KB
- Sample260729-nb5pgavshw
- SHA256 face8502383cba02854829913ff52c6c9e5172ac81ad10ca2e6367a4e9b2a552
- MD5 2dcad6542c1e18f60a2a1f62ecaa0764
- SHA1 5419f4a630e68eed03bd026a76a1a7c4578f8aeb
- SHA512 acb69a1dd373029887cc6b4ffcf7bee054fdf38924128a63020417bb22afd28a26d7d287851480091463f6fc0ffe1cc9db29a4cc6eaaa84aa1a1658e46f564b0
- SSDEEP 3072:9T9G22IpYQfYjryojMEqrCw+raEUDcKB0ZkO5ua5:9hGiYQQ7jMEq+NMiZku
- TLSH T135C309B774C12347C85681B6123BAEF065B99D053E08C77553C86938AEBDCC8AEDB91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3008 2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe Token: SeIncBasePriorityPrivilege 3008 2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3008 2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe 3008 2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-29_2dcad6542c1e18f60a2a1f62ecaa0764_elex_wannacry.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3008