General
- Target 2026-07-29_aa939f4d17bbc69bdd1f676ba06a98ab_elex_wannacry
- Size 60KB
- Sample260729-rhcttawbka
- SHA256 93b283244c330fbb94ca1ce96b320fa1600196ec3737d241c78a12f7d5083bbb
- MD5 aa939f4d17bbc69bdd1f676ba06a98ab
- SHA1 69612dc6a2af2f78da409d653fae6e257aa6af94
- SHA512 5295b08fba4916dab7bac41660f4d5a104411d7b932616c4d8ce82f982f9169ed5d177f7255b6028a803216fc5658f7decbd8aa4c38bdef399457295f1647b0f
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwZY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLror4/CFsrd/
- TLSH T1225307834BDA9CF2FB91117108794BB9927B99D4910EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_aa939f4d17bbc69bdd1f676ba06a98ab_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_aa939f4d17bbc69bdd1f676ba06a98ab_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_aa939f4d17bbc69bdd1f676ba06a98ab_elex_wannacry
- Size 60KB
- SHA256 93b283244c330fbb94ca1ce96b320fa1600196ec3737d241c78a12f7d5083bbb
- MD5 aa939f4d17bbc69bdd1f676ba06a98ab
- SHA1 69612dc6a2af2f78da409d653fae6e257aa6af94
- SHA512 5295b08fba4916dab7bac41660f4d5a104411d7b932616c4d8ce82f982f9169ed5d177f7255b6028a803216fc5658f7decbd8aa4c38bdef399457295f1647b0f
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwZY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLror4/CFsrd/
- TLSH T1225307834BDA9CF2FB91117108794BB9927B99D4910EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE