General
- Target 2026-07-30_47c5d4261193a550df45ca59afe125aa_elex_wannacry
- Size 88KB
- Sample260730-gedltsce55
- SHA256 f077ba1f8538a1f60375fa559ef41d5414db86d67737c13340acdbaa0bb354ac
- MD5 47c5d4261193a550df45ca59afe125aa
- SHA1 7aaa976ad2d6ab6278ffbbf949d62c040835cba9
- SHA512 d876606209c6f5e6d66d3a53aec0c0902874b9d30603a3cb364c89d975bf98b0b080b3451fcf2b2e44f6f47c54e7530f76a6afc0135c44a7c92cf6e9598f0ad1
- SSDEEP 1536:Oul8UZRl+ScvTXk8SDP+S9loyeE+Gma8izmcMVpvZTphtyKSf3eWST8/uZHb2Bk:Ou/mr8FJeE+s8iHO599yDaZHbqk
- TLSH T1879301AEF9D1DC36CE4251F10D6A4649993EECA80462D713C7570F189E68EC3D22A2CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_47c5d4261193a550df45ca59afe125aa_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_47c5d4261193a550df45ca59afe125aa_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_47c5d4261193a550df45ca59afe125aa_elex_wannacry
- Size 88KB
- SHA256 f077ba1f8538a1f60375fa559ef41d5414db86d67737c13340acdbaa0bb354ac
- MD5 47c5d4261193a550df45ca59afe125aa
- SHA1 7aaa976ad2d6ab6278ffbbf949d62c040835cba9
- SHA512 d876606209c6f5e6d66d3a53aec0c0902874b9d30603a3cb364c89d975bf98b0b080b3451fcf2b2e44f6f47c54e7530f76a6afc0135c44a7c92cf6e9598f0ad1
- SSDEEP 1536:Oul8UZRl+ScvTXk8SDP+S9loyeE+Gma8izmcMVpvZTphtyKSf3eWST8/uZHb2Bk:Ou/mr8FJeE+s8iHO599yDaZHbqk
- TLSH T1879301AEF9D1DC36CE4251F10D6A4649993EECA80462D713C7570F189E68EC3D22A2CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1