General
- Target 2026-07-31_38a4e5e4a6e7901932f7db4f3cb641dd_elex_wannacry
- Size 485KB
- Sample260731-xb31bayflf
- SHA256 4796b99f955119687b795a7f1b62b7830629fcc3e24dd13ac4b21a27dfca7bff
- MD5 38a4e5e4a6e7901932f7db4f3cb641dd
- SHA1 3c4c06ecfdbe9c0a340e12dc45218268b213d080
- SHA512 939b8018aec31df37bf8aa8ba6b7556c87f7c28696eb8ba74f2ffdf3f2a021a99986d58995684a046f8bd7c5c77ab6f83b375334224130c8a4128f2c0bb31b50
- SSDEEP 12288:mAEEufiHxZqMI1I10mkbYG888888888888W88888888888ETxyt:muufyxIMbGCTxyt
- TLSH T12AB43AF1629650F8F9A366354B718E9C7F227C2739E3910A2D3CF60D047DE89C872692
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_38a4e5e4a6e7901932f7db4f3cb641dd_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_38a4e5e4a6e7901932f7db4f3cb641dd_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_38a4e5e4a6e7901932f7db4f3cb641dd_elex_wannacry
- Size 485KB
- SHA256 4796b99f955119687b795a7f1b62b7830629fcc3e24dd13ac4b21a27dfca7bff
- MD5 38a4e5e4a6e7901932f7db4f3cb641dd
- SHA1 3c4c06ecfdbe9c0a340e12dc45218268b213d080
- SHA512 939b8018aec31df37bf8aa8ba6b7556c87f7c28696eb8ba74f2ffdf3f2a021a99986d58995684a046f8bd7c5c77ab6f83b375334224130c8a4128f2c0bb31b50
- SSDEEP 12288:mAEEufiHxZqMI1I10mkbYG888888888888W88888888888ETxyt:muufyxIMbGCTxyt
- TLSH T12AB43AF1629650F8F9A366354B718E9C7F227C2739E3910A2D3CF60D047DE89C872692
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.