General
- Target 2026-07-30_f646296f7bcf2d3b52cded0ecd486f6c_elex_wannacry
- Size 18KB
- Sample260730-kk87gaee45
- SHA256 6e0d8f891346aa99f869b0d27fde9da4c146d56a86c6ac934799f34c67266dce
- MD5 f646296f7bcf2d3b52cded0ecd486f6c
- SHA1 e9151476708cb930afe42cbe63503a5182a58c81
- SHA512 50ad869cc35d88208bec1e93d7740351335ae07c7fe08a7c4a96038e05648abd5e5a95dcc3faf1cf0d776df0862fbc5b3ed41685d31a450f8fb4f6197ec6ae33
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6g:uTQWckBeEd6ml1pcg7F3GiElpd2f
- TLSH T11B82A5356BD55D73E3BBD7B196F7C1C66975B02B6E03992E80481B882C33A10DDA0F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_f646296f7bcf2d3b52cded0ecd486f6c_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_f646296f7bcf2d3b52cded0ecd486f6c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_f646296f7bcf2d3b52cded0ecd486f6c_elex_wannacry
- Size 18KB
- SHA256 6e0d8f891346aa99f869b0d27fde9da4c146d56a86c6ac934799f34c67266dce
- MD5 f646296f7bcf2d3b52cded0ecd486f6c
- SHA1 e9151476708cb930afe42cbe63503a5182a58c81
- SHA512 50ad869cc35d88208bec1e93d7740351335ae07c7fe08a7c4a96038e05648abd5e5a95dcc3faf1cf0d776df0862fbc5b3ed41685d31a450f8fb4f6197ec6ae33
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6g:uTQWckBeEd6ml1pcg7F3GiElpd2f
- TLSH T11B82A5356BD55D73E3BBD7B196F7C1C66975B02B6E03992E80481B882C33A10DDA0F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE