General
- Target 2026-07-30_a1af264a34d231ed8aaba2dac842d8a6_elex_wannacry
- Size 64KB
- Sample260730-sj53est1dy
- SHA256 3d3bc859e0abc04e6a91efd83d59b18601cce9dd55787afae485f3ec5dabb107
- MD5 a1af264a34d231ed8aaba2dac842d8a6
- SHA1 c121189acdf3e29b9cdedbca784e204764cbc5e2
- SHA512 dd0ff6e9248d71e609ddbd0b31b397afc2df824874083df73f176e9bcd708384e0d2c7e2ade992fa0faa31379278d2b29dd9bbf5541a293e919935a84c164976
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwRY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroj4/CFsrdT
- TLSH T18353414A269548A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_a1af264a34d231ed8aaba2dac842d8a6_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_a1af264a34d231ed8aaba2dac842d8a6_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_a1af264a34d231ed8aaba2dac842d8a6_elex_wannacry
- Size 64KB
- SHA256 3d3bc859e0abc04e6a91efd83d59b18601cce9dd55787afae485f3ec5dabb107
- MD5 a1af264a34d231ed8aaba2dac842d8a6
- SHA1 c121189acdf3e29b9cdedbca784e204764cbc5e2
- SHA512 dd0ff6e9248d71e609ddbd0b31b397afc2df824874083df73f176e9bcd708384e0d2c7e2ade992fa0faa31379278d2b29dd9bbf5541a293e919935a84c164976
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwRY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroj4/CFsrdT
- TLSH T18353414A269548A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE