General
- Target 2026-08-01_30be0c809d796df34563bb6828ce1c25_elex_wannacry
- Size 15KB
- Sample260801-g6f62afb28
- SHA256 a49af38b40b7227ab8e97ec3628115ea98f779bacc149ca8ed5b40cf731bc96f
- MD5 30be0c809d796df34563bb6828ce1c25
- SHA1 5a0d8d0e131a676c6cd4151c8c38450aa8b7d6b0
- SHA512 96673feae032a45f3a76e5d043e793f0f78dc2518e79154c0f0d92a35443da42d39f1a8ca30336b563d9edc202bc38f1b6516315bf05ae315b95766b00a80929
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFAAYeU8:uTQWckBeEd6ml1pcg7F3GiElpNd
- TLSH T10F72C6356BD44C73E3FBD3B195FBC1D66975742E27035A3F90882F893923A119C60A89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_30be0c809d796df34563bb6828ce1c25_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_30be0c809d796df34563bb6828ce1c25_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_30be0c809d796df34563bb6828ce1c25_elex_wannacry
- Size 15KB
- SHA256 a49af38b40b7227ab8e97ec3628115ea98f779bacc149ca8ed5b40cf731bc96f
- MD5 30be0c809d796df34563bb6828ce1c25
- SHA1 5a0d8d0e131a676c6cd4151c8c38450aa8b7d6b0
- SHA512 96673feae032a45f3a76e5d043e793f0f78dc2518e79154c0f0d92a35443da42d39f1a8ca30336b563d9edc202bc38f1b6516315bf05ae315b95766b00a80929
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFAAYeU8:uTQWckBeEd6ml1pcg7F3GiElpNd
- TLSH T10F72C6356BD44C73E3FBD3B195FBC1D66975742E27035A3F90882F893923A119C60A89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE