General
- Target 2026-07-30_17860944ba71de974985ee09e88d78a3_elex_wannacry
- Size 64KB
- Sample260730-wrerzsej7w
- SHA256 97d683d4622fd30575cf600d5bb2fed2839556f92e6d64fbec4d197f3b4041f6
- MD5 17860944ba71de974985ee09e88d78a3
- SHA1 e47deb60c87bf0a4be0b1a4f8dd59b6e597291db
- SHA512 ff636d26cde1c4a608191e46737b089b57e439534b2d303fe85fea64227a2526e9b07b2762d7c646afcdba82c725f32a2e5064f7d8de50c67b8fa967c208d32f
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwRY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroj4/CFsrdT
- TLSH T12553414A269544A3F94EB1B83CE44D7C61AF55C050296B7AE7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_17860944ba71de974985ee09e88d78a3_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_17860944ba71de974985ee09e88d78a3_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_17860944ba71de974985ee09e88d78a3_elex_wannacry
- Size 64KB
- SHA256 97d683d4622fd30575cf600d5bb2fed2839556f92e6d64fbec4d197f3b4041f6
- MD5 17860944ba71de974985ee09e88d78a3
- SHA1 e47deb60c87bf0a4be0b1a4f8dd59b6e597291db
- SHA512 ff636d26cde1c4a608191e46737b089b57e439534b2d303fe85fea64227a2526e9b07b2762d7c646afcdba82c725f32a2e5064f7d8de50c67b8fa967c208d32f
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwRY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroj4/CFsrdT
- TLSH T12553414A269544A3F94EB1B83CE44D7C61AF55C050296B7AE7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE