General
- Target 2026-08-01_facea5a3d9512fa99901021b86578f25_elex_wannacry
- Size 64KB
- Sample260801-ctfyaacb73
- SHA256 0b74894d5bb363e53ab6a4a08d0dbb7c4958601ffb9296ceaf5ca3bd4ea160fd
- MD5 facea5a3d9512fa99901021b86578f25
- SHA1 ce77768c7ff1282b6cb8e59d25e6c5ba4930c13c
- SHA512 d6209eb773e4a33158c40871e7e4fef8b8e96c73d6c79d6d942d9b28c9025c9aa0b59d9d273a49df7aecd0c7e1e6e087ce9b6d9bc33ccb637059046d2a3691b9
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrof4/CFsrdn0A9lsy4:vvw9816vhKQLrof4/wQH9lsl
- TLSH T120535C834BEE98F2F7D20131056D8AB99277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_facea5a3d9512fa99901021b86578f25_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_facea5a3d9512fa99901021b86578f25_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_facea5a3d9512fa99901021b86578f25_elex_wannacry
- Size 64KB
- SHA256 0b74894d5bb363e53ab6a4a08d0dbb7c4958601ffb9296ceaf5ca3bd4ea160fd
- MD5 facea5a3d9512fa99901021b86578f25
- SHA1 ce77768c7ff1282b6cb8e59d25e6c5ba4930c13c
- SHA512 d6209eb773e4a33158c40871e7e4fef8b8e96c73d6c79d6d942d9b28c9025c9aa0b59d9d273a49df7aecd0c7e1e6e087ce9b6d9bc33ccb637059046d2a3691b9
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrof4/CFsrdn0A9lsy4:vvw9816vhKQLrof4/wQH9lsl
- TLSH T120535C834BEE98F2F7D20131056D8AB99277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE