General
- Target 2026-08-02_db18a3a1fd718ab8fe0b2cc94fa7dfe4_elex_wannacry
- Size 64KB
- Sample260802-qtqpdatepf
- SHA256 3697fe4669023bde86807cf0350ec962d5535344a1edc2bc3fbf2f7289630390
- MD5 db18a3a1fd718ab8fe0b2cc94fa7dfe4
- SHA1 05e06658038dd8649844f7cc7efe6859833d281a
- SHA512 9f6aea897388b9d41aee5b7f52f2320e7172e1cbc8322b959c17d1fa88962150f534ee9a5b122a25e68749c239435bf727a254b7eda9af809f264b7437f05063
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwgJY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroi4/CFsrdY
- TLSH T1DF53D84B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED138426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_db18a3a1fd718ab8fe0b2cc94fa7dfe4_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_db18a3a1fd718ab8fe0b2cc94fa7dfe4_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_db18a3a1fd718ab8fe0b2cc94fa7dfe4_elex_wannacry
- Size 64KB
- SHA256 3697fe4669023bde86807cf0350ec962d5535344a1edc2bc3fbf2f7289630390
- MD5 db18a3a1fd718ab8fe0b2cc94fa7dfe4
- SHA1 05e06658038dd8649844f7cc7efe6859833d281a
- SHA512 9f6aea897388b9d41aee5b7f52f2320e7172e1cbc8322b959c17d1fa88962150f534ee9a5b122a25e68749c239435bf727a254b7eda9af809f264b7437f05063
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwgJY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroi4/CFsrdY
- TLSH T1DF53D84B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED138426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE