General
- Target 2026-07-30_490b5c64f591cd75192fc21b90a0ad69_elex_wannacry
- Size 32KB
- Sample260730-geavyat1bt
- SHA256 26dd3ed68d8b79c3e5e68fa0d5ff72356be3e9f3546c2e177364610a504506ed
- MD5 490b5c64f591cd75192fc21b90a0ad69
- SHA1 f5e2c2de5dbcf89cf2dddc22ba527a1f82dd615f
- SHA512 5fa2979b4c6d3050664660378afe6899eaf82fa53f3bb1eb51e30100cc277ef3f07296b89bdd33423efcf82ba1bb42c477ae3b185f680dd8ce666a73a573402d
- SSDEEP 192:uTq5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmAKLCAYV7/mjmTUsIT:uTKWckBeEd6ml1pcg7eMUUz62xP
- TLSH T140E250346BE51D73E3BBDBB586F7C1C66975B42A2E03991E80850B841833A11DCB0F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_490b5c64f591cd75192fc21b90a0ad69_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_490b5c64f591cd75192fc21b90a0ad69_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_490b5c64f591cd75192fc21b90a0ad69_elex_wannacry
- Size 32KB
- SHA256 26dd3ed68d8b79c3e5e68fa0d5ff72356be3e9f3546c2e177364610a504506ed
- MD5 490b5c64f591cd75192fc21b90a0ad69
- SHA1 f5e2c2de5dbcf89cf2dddc22ba527a1f82dd615f
- SHA512 5fa2979b4c6d3050664660378afe6899eaf82fa53f3bb1eb51e30100cc277ef3f07296b89bdd33423efcf82ba1bb42c477ae3b185f680dd8ce666a73a573402d
- SSDEEP 192:uTq5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmAKLCAYV7/mjmTUsIT:uTKWckBeEd6ml1pcg7eMUUz62xP
- TLSH T140E250346BE51D73E3BBDBB586F7C1C66975B42A2E03991E80850B841833A11DCB0F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE