General
- Target 2026-07-29_94b9d9f317f2fb659a2a6e26dd9505d5_elex_wannacry
- Size 26.3MB
- Sample260730-b74qtsxble
- SHA256 bb8b9f840ccbea1211f5b66d3aaf072ec9128b731182db68473136bd7dfa72dd
- MD5 94b9d9f317f2fb659a2a6e26dd9505d5
- SHA1 34638cc5ec5811e4f808820b7ee96c8fc536390d
- SHA512 2eb4e496e14242ed43d56578391fe727d52b3b9dbe462c840ec32bcfb0b0047a18887cc3fdd8b0fadee6f8928230ed9a3152fa33b2ea234078177459b25d3faa
- SSDEEP 786432:W7Ou7SfLWgJOcG2a3RV5QTcHIjrEGtIMDf0gnL15v27:W7OuQNNG2ahV5g8GSCfbrv27
- TLSH T1E35733C242123996E994AF3E46D711493931FCA27682301B3939FD506D0264BBA7F7FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_94b9d9f317f2fb659a2a6e26dd9505d5_elex_wannacry.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_94b9d9f317f2fb659a2a6e26dd9505d5_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_94b9d9f317f2fb659a2a6e26dd9505d5_elex_wannacry
- Size 26.3MB
- SHA256 bb8b9f840ccbea1211f5b66d3aaf072ec9128b731182db68473136bd7dfa72dd
- MD5 94b9d9f317f2fb659a2a6e26dd9505d5
- SHA1 34638cc5ec5811e4f808820b7ee96c8fc536390d
- SHA512 2eb4e496e14242ed43d56578391fe727d52b3b9dbe462c840ec32bcfb0b0047a18887cc3fdd8b0fadee6f8928230ed9a3152fa33b2ea234078177459b25d3faa
- SSDEEP 786432:W7Ou7SfLWgJOcG2a3RV5QTcHIjrEGtIMDf0gnL15v27:W7OuQNNG2ahV5g8GSCfbrv27
- TLSH T1E35733C242123996E994AF3E46D711493931FCA27682301B3939FD506D0264BBA7F7FB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Visual Basic
1Windows Command Shell
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1