General
- Target 2026-08-01_d087ee8e6bec063e76b211ca7cff2764_elex_wannacry
- Size 404KB
- Sample260801-pzy29sag77
- SHA256 7fb641ce5fdaa152432412680ace71d423f5a9da470e2b8a65f97c206e0d3b88
- MD5 d087ee8e6bec063e76b211ca7cff2764
- SHA1 12ae4766b92efba06a7276a1c297f0fcdde55fca
- SHA512 bf79e3da642d943b88a36b7bf37bc5a9d091ef109dceabc189feb5c4e15e0850edce2eb592ec8b348208bf7016de17f52f3c0d62e3d3f61aee1bdcea979e93d7
- SSDEEP 3072:QoVDjW0LNBYRKJkbK8gTr9bHuVVWIeyc1ygZejchrRogwskyFZIlynysyoJP7cxi:Z+0IU2KB9buV+gArogZZvyYPIxU
- TLSH T1C494AD08E26CC574F69246703D8887E70655FF940DE0A4AD2B24F38E5FFEA025FD824A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_d087ee8e6bec063e76b211ca7cff2764_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_d087ee8e6bec063e76b211ca7cff2764_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_d087ee8e6bec063e76b211ca7cff2764_elex_wannacry
- Size 404KB
- SHA256 7fb641ce5fdaa152432412680ace71d423f5a9da470e2b8a65f97c206e0d3b88
- MD5 d087ee8e6bec063e76b211ca7cff2764
- SHA1 12ae4766b92efba06a7276a1c297f0fcdde55fca
- SHA512 bf79e3da642d943b88a36b7bf37bc5a9d091ef109dceabc189feb5c4e15e0850edce2eb592ec8b348208bf7016de17f52f3c0d62e3d3f61aee1bdcea979e93d7
- SSDEEP 3072:QoVDjW0LNBYRKJkbK8gTr9bHuVVWIeyc1ygZejchrRogwskyFZIlynysyoJP7cxi:Z+0IU2KB9buV+gArogZZvyYPIxU
- TLSH T1C494AD08E26CC574F69246703D8887E70655FF940DE0A4AD2B24F38E5FFEA025FD824A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.