General
- Target 2026-07-31_73c2fc3960bd70d7b7880d3f52df37ad_amadey_elex_vidar_wannacry
- Size 4.3MB
- Sample260731-h7c2faeg67
- SHA256 167e2f0acbc11a2d94579e2b6e7e509b92cc6f9683db676ed421b40574065b9d
- MD5 73c2fc3960bd70d7b7880d3f52df37ad
- SHA1 fb8ce575468d2d8e94258f8fe16cb13043ad3c85
- SHA512 dcb32152ad115be22783d53bdd910ae8b812faab6ed82f378469da38d5cd42045a2f47e63e3573211a0dc72868d222a7ee11c613b1f205b6851ec501e9d81eca
- SSDEEP 49152:kHNH9TL9IW1dXg3S/MHmgen1d3So72nMbz+ZqhaK6zbfqdlJCWSVipYq:wL9IW1dXg3S/MHmgenh7D+xCN6
- TLSH T18726E5C1A6D68027DC6D5D3085919631F4307F9F3E2E7687EE44B66A9B3F2C0992D322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_73c2fc3960bd70d7b7880d3f52df37ad_amadey_elex_vidar_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_73c2fc3960bd70d7b7880d3f52df37ad_amadey_elex_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_73c2fc3960bd70d7b7880d3f52df37ad_amadey_elex_vidar_wannacry
- Size 4.3MB
- SHA256 167e2f0acbc11a2d94579e2b6e7e509b92cc6f9683db676ed421b40574065b9d
- MD5 73c2fc3960bd70d7b7880d3f52df37ad
- SHA1 fb8ce575468d2d8e94258f8fe16cb13043ad3c85
- SHA512 dcb32152ad115be22783d53bdd910ae8b812faab6ed82f378469da38d5cd42045a2f47e63e3573211a0dc72868d222a7ee11c613b1f205b6851ec501e9d81eca
- SSDEEP 49152:kHNH9TL9IW1dXg3S/MHmgen1d3So72nMbz+ZqhaK6zbfqdlJCWSVipYq:wL9IW1dXg3S/MHmgenh7D+xCN6
- TLSH T18726E5C1A6D68027DC6D5D3085919631F4307F9F3E2E7687EE44B66A9B3F2C0992D322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory