General
- Target 2026-07-30_d541b17af9ddf7d57b1c427f407c129a_elex_wannacry
- Size 68KB
- Sample260730-jkn1vstcnc
- SHA256 405541e1cc891825c79966181bdfd03a003cc1789bafd34f4f7e3417dc4c48a8
- MD5 d541b17af9ddf7d57b1c427f407c129a
- SHA1 408bd8c0f953da541c923149be285671149b79df
- SHA512 4aa66994911752742179b1a724f5bde98578cd43f6d3a6ea21e9484697de9da9a6fde0c39b8c6a5903300a643be4c64200c19e49e7c0beb2963cbecc3a1ef0a4
- SSDEEP 192:ebOzawOs81elJHsc45CcRZOOtShcWaOT2QLrCqwEY04/CFxyNhoy5t:ebLwOs8AHsc4sMlwhKQLroy4/CFsrd
- TLSH T12863C543CBBB78F2FE9311300CE84AB5926BDDC49109BE9B6B40C9153326352D72AD0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_d541b17af9ddf7d57b1c427f407c129a_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_d541b17af9ddf7d57b1c427f407c129a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_d541b17af9ddf7d57b1c427f407c129a_elex_wannacry
- Size 68KB
- SHA256 405541e1cc891825c79966181bdfd03a003cc1789bafd34f4f7e3417dc4c48a8
- MD5 d541b17af9ddf7d57b1c427f407c129a
- SHA1 408bd8c0f953da541c923149be285671149b79df
- SHA512 4aa66994911752742179b1a724f5bde98578cd43f6d3a6ea21e9484697de9da9a6fde0c39b8c6a5903300a643be4c64200c19e49e7c0beb2963cbecc3a1ef0a4
- SSDEEP 192:ebOzawOs81elJHsc45CcRZOOtShcWaOT2QLrCqwEY04/CFxyNhoy5t:ebLwOs8AHsc4sMlwhKQLroy4/CFsrd
- TLSH T12863C543CBBB78F2FE9311300CE84AB5926BDDC49109BE9B6B40C9153326352D72AD0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE