General
- Target 2026-07-29_a3683a8a3b85738192b3eeca75ed6906_elex_wannacry
- Size 320KB
- Sample260729-ynfafser41
- SHA256 c1b3147db2cac2e44f0782b301ed55ee8f5642f8b7cf29bc7e110bc11b5eeedd
- MD5 a3683a8a3b85738192b3eeca75ed6906
- SHA1 e724878e0c8e80e7d85128be8e62e929b606612e
- SHA512 ee9dafa3adea62ccd1471d39ce98573660f45ac44678df615397b7d72e9ca3c8387b59fa30212952657f7d1d28dca40071a48af9f47c06fe958076d71dd5dac7
- SSDEEP 3072:fDEGh0ollZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEG/lnOe2MUVg3vdeKcAEjy
- TLSH T12B64A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_a3683a8a3b85738192b3eeca75ed6906_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_a3683a8a3b85738192b3eeca75ed6906_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a3683a8a3b85738192b3eeca75ed6906_elex_wannacry
- Size 320KB
- SHA256 c1b3147db2cac2e44f0782b301ed55ee8f5642f8b7cf29bc7e110bc11b5eeedd
- MD5 a3683a8a3b85738192b3eeca75ed6906
- SHA1 e724878e0c8e80e7d85128be8e62e929b606612e
- SHA512 ee9dafa3adea62ccd1471d39ce98573660f45ac44678df615397b7d72e9ca3c8387b59fa30212952657f7d1d28dca40071a48af9f47c06fe958076d71dd5dac7
- SSDEEP 3072:fDEGh0ollZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEG/lnOe2MUVg3vdeKcAEjy
- TLSH T12B64A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE