General
- Target 2026-07-30_64188c3adbd2be09298d845ed2e57b35_elex_wannacry
- Size 64KB
- Sample260730-sxesds1bqf
- SHA256 df0501b25d3ec5cd8d5dbc41e45b7d89cab675664bdc1171aea2fda4339ceba7
- MD5 64188c3adbd2be09298d845ed2e57b35
- SHA1 2c8ea1688ed2506c912b19e66209f1d2d8f67975
- SHA512 8b318cdae75b91d3c0279944cd2ef0cd379293bca32e710e51acc218041ee522882257022efbe40d2c65bb720710340c9ea796abaf5650f3ffae821f991794af
- SSDEEP 768:OrItKyw5WHXfQmjIiIk9ecAa2Mb96gyXYDLd1:Or3Z5IfQmv81alryXyZ1
- TLSH T1F8535D87E79151A9E00B403414537BBA6CB23CB6C90F9622BF91BD4F3CB9E86B915D43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_64188c3adbd2be09298d845ed2e57b35_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_64188c3adbd2be09298d845ed2e57b35_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_64188c3adbd2be09298d845ed2e57b35_elex_wannacry
- Size 64KB
- SHA256 df0501b25d3ec5cd8d5dbc41e45b7d89cab675664bdc1171aea2fda4339ceba7
- MD5 64188c3adbd2be09298d845ed2e57b35
- SHA1 2c8ea1688ed2506c912b19e66209f1d2d8f67975
- SHA512 8b318cdae75b91d3c0279944cd2ef0cd379293bca32e710e51acc218041ee522882257022efbe40d2c65bb720710340c9ea796abaf5650f3ffae821f991794af
- SSDEEP 768:OrItKyw5WHXfQmjIiIk9ecAa2Mb96gyXYDLd1:Or3Z5IfQmv81alryXyZ1
- TLSH T1F8535D87E79151A9E00B403414537BBA6CB23CB6C90F9622BF91BD4F3CB9E86B915D43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.