General
- Target 2026-07-29_397a3633be300760c869295109920b47_elex_wannacry
- Size 382KB
- Sample260729-wldyhace74
- SHA256 b402352946ecf8d8e94801e61fdf84499c17a8698020f30ded3239655fe382e3
- MD5 397a3633be300760c869295109920b47
- SHA1 65deb40cbeeb028e6ca69987bdf04a77e8dfca63
- SHA512 cd653ef9dbf77dccc6f54f2e6bb4d351f0b381c04ec2981fd7e3f961ca9bf1123206062951a1873fd4272b106f4ee5895132c1976ef5f11ac1cbe98854f5d456
- SSDEEP 3072:5Iq9QcA1gLNJ+LxpvOTQ13mlsMnfNbpQhlRJctSmXM7qFCzgs4TEznLD1oo:ar1Wb+LOTQOflp8I87qFICTEznb
- TLSH T1F1849CAB3F31A2A9ED8901377D45ADFC662B9D071C41E3FA7041BB6C44B97CA84D10DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_397a3633be300760c869295109920b47_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_397a3633be300760c869295109920b47_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_397a3633be300760c869295109920b47_elex_wannacry
- Size 382KB
- SHA256 b402352946ecf8d8e94801e61fdf84499c17a8698020f30ded3239655fe382e3
- MD5 397a3633be300760c869295109920b47
- SHA1 65deb40cbeeb028e6ca69987bdf04a77e8dfca63
- SHA512 cd653ef9dbf77dccc6f54f2e6bb4d351f0b381c04ec2981fd7e3f961ca9bf1123206062951a1873fd4272b106f4ee5895132c1976ef5f11ac1cbe98854f5d456
- SSDEEP 3072:5Iq9QcA1gLNJ+LxpvOTQ13mlsMnfNbpQhlRJctSmXM7qFCzgs4TEznLD1oo:ar1Wb+LOTQOflp8I87qFICTEznb
- TLSH T1F1849CAB3F31A2A9ED8901377D45ADFC662B9D071C41E3FA7041BB6C44B97CA84D10DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.