General
- Target 2026-08-01_80fe4db4b338895bb7a77a0e5c88d0ea_elex_wannacry
- Size 64KB
- Sample260802-epgecsthnf
- SHA256 2ba7d951eee3edefb93205907cb5207e3e50eb230775891063ce51d3f2ee9303
- MD5 80fe4db4b338895bb7a77a0e5c88d0ea
- SHA1 90057a6745114bf2a8ecf8e8ecd75c33faa1a5ed
- SHA512 a086b0d190e4bda5e7b36e061a45fdb557aaba75a0706ae0aeeaa35a868064fc170d5ab44216a3202fea6100b22d3b822587ef86c078cc7ce7fd134f29b19d70
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE7Y04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroo4/CFsrdY
- TLSH T1A153E84B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED038426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_80fe4db4b338895bb7a77a0e5c88d0ea_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_80fe4db4b338895bb7a77a0e5c88d0ea_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_80fe4db4b338895bb7a77a0e5c88d0ea_elex_wannacry
- Size 64KB
- SHA256 2ba7d951eee3edefb93205907cb5207e3e50eb230775891063ce51d3f2ee9303
- MD5 80fe4db4b338895bb7a77a0e5c88d0ea
- SHA1 90057a6745114bf2a8ecf8e8ecd75c33faa1a5ed
- SHA512 a086b0d190e4bda5e7b36e061a45fdb557aaba75a0706ae0aeeaa35a868064fc170d5ab44216a3202fea6100b22d3b822587ef86c078cc7ce7fd134f29b19d70
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE7Y04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroo4/CFsrdY
- TLSH T1A153E84B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED038426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE