Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 09:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_1f5be6ac359b819e2f3d22228daa66d1_elex_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_1f5be6ac359b819e2f3d22228daa66d1_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-07-31_1f5be6ac359b819e2f3d22228daa66d1_elex_wannacry.exe
- Size 32KB
- Sample260731-lpvejszzdw
- SHA256 49f606bb4a949ef43ed180e4a3887d467a54a7ffdc03106301293d95f8a6c021
- MD5 1f5be6ac359b819e2f3d22228daa66d1
- SHA1 70fb5b9ff1dea194304dc6f11c490b00513bc65e
- SHA512 0fd779ddb785f43d29edf2589e5eb69a55e80c7a7219770d81598ad18f0f9b6d35252d77a01e61fac8b137126fa8e4230772aa5af69046edc6674b71db200d70
- SSDEEP 192:r6e96KTf+7Q6EXR5ApKpNF77I+bZ0yjwjj05S9zN1oynpyVAffnJ/3kY5vTVmYaC:2Sek7fDns1Wwnp3j5v5mYahwKD
- TLSH T1F7E2C907E6757CF6D2F3CA7056F907286262BA53C9B88A0A2BC44D1D7C379A1C91372D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-31_1f5be6ac359b819e2f3d22228daa66d1_elex_wannacry.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3328 2026-07-31_1f5be6ac359b819e2f3d22228daa66d1_elex_wannacry.exe 3328 2026-07-31_1f5be6ac359b819e2f3d22228daa66d1_elex_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-31_1f5be6ac359b819e2f3d22228daa66d1_elex_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-31_1f5be6ac359b819e2f3d22228daa66d1_elex_wannacry.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3328