General
- Target 2026-08-01_127c1f48795f2118cf8dca9757fc28c9_elex_wannacry
- Size 485KB
- Sample260801-v4fdlsec65
- SHA256 3a3dbbcda6ba71c13252b31a62963b5e5057bfcdd72c8914396818c0fcf61c89
- MD5 127c1f48795f2118cf8dca9757fc28c9
- SHA1 8b8e4ae94d6e13759d9a728d62a93afeeed9a4dc
- SHA512 f0f623dad36d6e4d48ebc4410514f77c31b2d5491ac376d51b1bd711df46506243f01b3cda1337c6f06aa1d0f1496be77dd565bd8ab137c517e4803845ec8200
- SSDEEP 12288:mAEzpnXeVPhybY5IAV888888888888W88888888888ETxyt:mLnXJgQTxyt
- TLSH T1ECB40642A3A29438FDEF563C5A65C5906D3E7C251DE3955E2C38F70FC834682A87272E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_127c1f48795f2118cf8dca9757fc28c9_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_127c1f48795f2118cf8dca9757fc28c9_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_127c1f48795f2118cf8dca9757fc28c9_elex_wannacry
- Size 485KB
- SHA256 3a3dbbcda6ba71c13252b31a62963b5e5057bfcdd72c8914396818c0fcf61c89
- MD5 127c1f48795f2118cf8dca9757fc28c9
- SHA1 8b8e4ae94d6e13759d9a728d62a93afeeed9a4dc
- SHA512 f0f623dad36d6e4d48ebc4410514f77c31b2d5491ac376d51b1bd711df46506243f01b3cda1337c6f06aa1d0f1496be77dd565bd8ab137c517e4803845ec8200
- SSDEEP 12288:mAEzpnXeVPhybY5IAV888888888888W88888888888ETxyt:mLnXJgQTxyt
- TLSH T1ECB40642A3A29438FDEF563C5A65C5906D3E7C251DE3955E2C38F70FC834682A87272E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.