6e694b3c5258014672e7fed2ca660d81cb1acf94b049efff21cd5f2b3567cb6b | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-07-29...ry.exe

windows10-2004-x64

2026-07-29...ry.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-29_ccaca9d8cdc3ce45315c013181402749_elex_wannacry
Size 195KB
Sample260729-x8b8vsttev
SHA256 6e694b3c5258014672e7fed2ca660d81cb1acf94b049efff21cd5f2b3567cb6b
MD5 ccaca9d8cdc3ce45315c013181402749
SHA1 2713e0df2fd94606e1ae34c269faa75deaadb9fb
SHA512 67af812d055fd8dcd5b9eec9e5d810ec64e9813b5de3e7a07b42d9b35238cf9c12fe7f530ab938888783a9894fe30903e316b091fc3e487863e0b9afaea6bada
SSDEEP 3072:W++S/lmzxDS0l0GFKuRZwAwgmhJ9+LjcwyqF5whN5IIiGEbZJkVm6Ub5LJx+mN7:iS/lm1djkcZghJ9MPJFO4IiEExTwmN7
TLSH
T1CF141297BBC168B9FE3B4432306BA135D67335BD4E2AB9939F50CE776822019C8153C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-29_ccaca9d8cdc3ce45315c013181402749_elex_wannacry.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

2026-07-29_ccaca9d8cdc3ce45315c013181402749_elex_wannacry.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  2026-07-29_ccaca9d8cdc3ce45315c013181402749_elex_wannacry
- Size 195KB
- SHA256 6e694b3c5258014672e7fed2ca660d81cb1acf94b049efff21cd5f2b3567cb6b
- MD5 ccaca9d8cdc3ce45315c013181402749
- SHA1 2713e0df2fd94606e1ae34c269faa75deaadb9fb
- SHA512 67af812d055fd8dcd5b9eec9e5d810ec64e9813b5de3e7a07b42d9b35238cf9c12fe7f530ab938888783a9894fe30903e316b091fc3e487863e0b9afaea6bada
- SSDEEP 3072:W++S/lmzxDS0l0GFKuRZwAwgmhJ9+LjcwyqF5whN5IIiGEbZJkVm6Ub5LJx+mN7:iS/lm1djkcZghJ9MPJFO4IiEExTwmN7
- TLSH
  T1CF141297BBC168B9FE3B4432306BA135D67335BD4E2AB9939F50CE776822019C8153C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies firewall policy service
  defense_evasion
- Adds policy Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy