General
- Target 2026-08-01_86370e39deca81e89bd77d98db702fdf_elex_wannacry
- Size 384KB
- Sample260802-amvrrazhph
- SHA256 5ecea658cdeb5e3748481ee9c27864ec8921d60ba99b3e8a8b5977ebcca1bcf9
- MD5 86370e39deca81e89bd77d98db702fdf
- SHA1 b828e864e8684be99af0ce1f5d64539b20384978
- SHA512 3186571763e7d802be57bdc6c529c5130c46d433b6fb2b7b813a8f487307db158e63c105546eb90a738b1082b63ad66dd5ddec5115805232c4bd86151eb45a32
- SSDEEP 3072:e3ZA50IVf7O/3p5RGHSRJ4odh7+ha8hMs8/fl32aN7/9u7wmznt45cnspXdRiVeU:rPVf6PXPHh7+gE8/fRhVX8a2mXdgVeOZ
- TLSH T156846A8427C4CB1EDAA4C4F69E38ABBC0A7E0DC55D1CD88AE035BB8F167529D44D1CAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_86370e39deca81e89bd77d98db702fdf_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_86370e39deca81e89bd77d98db702fdf_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_86370e39deca81e89bd77d98db702fdf_elex_wannacry
- Size 384KB
- SHA256 5ecea658cdeb5e3748481ee9c27864ec8921d60ba99b3e8a8b5977ebcca1bcf9
- MD5 86370e39deca81e89bd77d98db702fdf
- SHA1 b828e864e8684be99af0ce1f5d64539b20384978
- SHA512 3186571763e7d802be57bdc6c529c5130c46d433b6fb2b7b813a8f487307db158e63c105546eb90a738b1082b63ad66dd5ddec5115805232c4bd86151eb45a32
- SSDEEP 3072:e3ZA50IVf7O/3p5RGHSRJ4odh7+ha8hMs8/fl32aN7/9u7wmznt45cnspXdRiVeU:rPVf6PXPHh7+gE8/fRhVX8a2mXdgVeOZ
- TLSH T156846A8427C4CB1EDAA4C4F69E38ABBC0A7E0DC55D1CD88AE035BB8F167529D44D1CAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.