General
- Target 2026-07-29_f4c94ebb6d1e27df183179dbe4860cf8_elex_wannacry
- Size 485KB
- Sample260729-t9bryaxfma
- SHA256 2eae218c05a014a5689d7eea59d2e1b12de1ab71758c82d70ebf5c321e38d887
- MD5 f4c94ebb6d1e27df183179dbe4860cf8
- SHA1 e0956553e63dfa86037a42b2166647f579e8d8b5
- SHA512 7ac6ba711ffba9dec2e40f744ce0a5a590a59224240db73ee1e75e5b0d806af0b33f6ac5bc29583fbcfb784eff65f9b9fb3a7c5e28505378d6b76d7e31ba980d
- SSDEEP 12288:mAEPqZoJv5Oct+U2lJTg888888888888W88888888888ETxyt:m0csVldTxyt
- TLSH T1BEB4F601B7968439EBE275F80BA291656E227C21DCE1890B2D70F79D0973583C973FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_f4c94ebb6d1e27df183179dbe4860cf8_elex_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_f4c94ebb6d1e27df183179dbe4860cf8_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_f4c94ebb6d1e27df183179dbe4860cf8_elex_wannacry
- Size 485KB
- SHA256 2eae218c05a014a5689d7eea59d2e1b12de1ab71758c82d70ebf5c321e38d887
- MD5 f4c94ebb6d1e27df183179dbe4860cf8
- SHA1 e0956553e63dfa86037a42b2166647f579e8d8b5
- SHA512 7ac6ba711ffba9dec2e40f744ce0a5a590a59224240db73ee1e75e5b0d806af0b33f6ac5bc29583fbcfb784eff65f9b9fb3a7c5e28505378d6b76d7e31ba980d
- SSDEEP 12288:mAEPqZoJv5Oct+U2lJTg888888888888W88888888888ETxyt:m0csVldTxyt
- TLSH T1BEB4F601B7968439EBE275F80BA291656E227C21DCE1890B2D70F79D0973583C973FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.