General
- Target 2026-07-31_ff939804230fbf0bdc30390f8c99366b_elex_wannacry
- Size 404KB
- Sample260731-2yzcvsaa35
- SHA256 31636b0cd51d732574d7b0566266d7b957245f726b83b18016b85c0630b3df30
- MD5 ff939804230fbf0bdc30390f8c99366b
- SHA1 ac0ff6dfc32325e2c64e69b4b81d7b5114860ca9
- SHA512 6112df8f7c5293f22606c5325d9404381fb78fe60a8d4f185e04eabcbf2ce1abe4fae2d565be9f45f8f31d98b84ef89f793c42a7e55916f33bdbd6cf288d9ba0
- SSDEEP 3072:QoVDjW0LtkqUNx4IYRTpSOIYDQx6Vp1CKq7+3kdOnwctksu7qNajEEDgm22gRLTn:Z+0D8xjYDu0VnCXfdOwi1ETWPI5Z
- TLSH T1FA949CD179145D5AF2AE8D324A158EB1E739AE00AFB1C99A60EF3F0CC8777505E30627
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_ff939804230fbf0bdc30390f8c99366b_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_ff939804230fbf0bdc30390f8c99366b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_ff939804230fbf0bdc30390f8c99366b_elex_wannacry
- Size 404KB
- SHA256 31636b0cd51d732574d7b0566266d7b957245f726b83b18016b85c0630b3df30
- MD5 ff939804230fbf0bdc30390f8c99366b
- SHA1 ac0ff6dfc32325e2c64e69b4b81d7b5114860ca9
- SHA512 6112df8f7c5293f22606c5325d9404381fb78fe60a8d4f185e04eabcbf2ce1abe4fae2d565be9f45f8f31d98b84ef89f793c42a7e55916f33bdbd6cf288d9ba0
- SSDEEP 3072:QoVDjW0LtkqUNx4IYRTpSOIYDQx6Vp1CKq7+3kdOnwctksu7qNajEEDgm22gRLTn:Z+0D8xjYDu0VnCXfdOwi1ETWPI5Z
- TLSH T1FA949CD179145D5AF2AE8D324A158EB1E739AE00AFB1C99A60EF3F0CC8777505E30627
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.