General
- Target 2026-08-02_e91301502f6b802795720e230764a67a_elex_wannacry
- Size 83KB
- Sample260802-mkk6ragq2v
- SHA256 a18b35cfa7825eb6c126f70a0f64b96691f9243ecdedc48d949638eb9074706a
- MD5 e91301502f6b802795720e230764a67a
- SHA1 7a7ba6beeca7d5cb775dad96b554f75da9799f7a
- SHA512 83a66b96f41c303eb5a92a3495b5fc7992af251b588b84fce124f4ae6592993c468c12bd69618aa4875573c847dc3432e6af9be79de781f1f71fffeebf2686c0
- SSDEEP 1536:Oul8UZRl+ScvTXk8SDP+S9loyeE+Gma8izmcMVpfRsTHm9qCnjR09R3aLCszh:Ou/mr8FJeE+s8iHOIHElAqGOh
- TLSH T14683F1ADF7A4EC33C95301F11DA64A1AE57EE97005A2EB52C7530E0D5E29AC7502E28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_e91301502f6b802795720e230764a67a_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_e91301502f6b802795720e230764a67a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_e91301502f6b802795720e230764a67a_elex_wannacry
- Size 83KB
- SHA256 a18b35cfa7825eb6c126f70a0f64b96691f9243ecdedc48d949638eb9074706a
- MD5 e91301502f6b802795720e230764a67a
- SHA1 7a7ba6beeca7d5cb775dad96b554f75da9799f7a
- SHA512 83a66b96f41c303eb5a92a3495b5fc7992af251b588b84fce124f4ae6592993c468c12bd69618aa4875573c847dc3432e6af9be79de781f1f71fffeebf2686c0
- SSDEEP 1536:Oul8UZRl+ScvTXk8SDP+S9loyeE+Gma8izmcMVpfRsTHm9qCnjR09R3aLCszh:Ou/mr8FJeE+s8iHOIHElAqGOh
- TLSH T14683F1ADF7A4EC33C95301F11DA64A1AE57EE97005A2EB52C7530E0D5E29AC7502E28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1