General
- Target 2026-08-02_60b39f74776799583947bb81998795dd_elex_wannacry
- Size 87KB
- Sample260802-gvdxjatzds
- SHA256 b748fbae2c05768c1f4cbf6762f98183cfd3b8a4a3422ecc0716997459d37476
- MD5 60b39f74776799583947bb81998795dd
- SHA1 6b0a131978bf016ca12bd5b55970f4613bd6ccd8
- SHA512 5776af817d6b4afc61d5e80811d2606cc1d391702e1859ff7506c2916f42beb1b48ea28b484100cb718340d42cc9ba89c5a45ed635c235f6439bd9c4e8e97194
- SSDEEP 1536:qu35z8ePP+Hs41h00bFFzqaGBjNDWRj/21hHXWX9e3GZTphtyKSf3eWST8/uZHbN:qu3T0XbFFzq1BjNsolX69e3G99yDaZHp
- TLSH T1A493F1A67AC19C31CEC351B329250C9186B968780B5B75D3CF5B03763E99EC7213578B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_60b39f74776799583947bb81998795dd_elex_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_60b39f74776799583947bb81998795dd_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_60b39f74776799583947bb81998795dd_elex_wannacry
- Size 87KB
- SHA256 b748fbae2c05768c1f4cbf6762f98183cfd3b8a4a3422ecc0716997459d37476
- MD5 60b39f74776799583947bb81998795dd
- SHA1 6b0a131978bf016ca12bd5b55970f4613bd6ccd8
- SHA512 5776af817d6b4afc61d5e80811d2606cc1d391702e1859ff7506c2916f42beb1b48ea28b484100cb718340d42cc9ba89c5a45ed635c235f6439bd9c4e8e97194
- SSDEEP 1536:qu35z8ePP+Hs41h00bFFzqaGBjNDWRj/21hHXWX9e3GZTphtyKSf3eWST8/uZHbN:qu3T0XbFFzq1BjNsolX69e3G99yDaZHp
- TLSH T1A493F1A67AC19C31CEC351B329250C9186B968780B5B75D3CF5B03763E99EC7213578B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1