General
- Target 2026-08-02_66cadca1fe900a12c7eff2f62851b72c_elex_wannacry
- Size 58KB
- Sample260802-rnva2svcqa
- SHA256 adef4563e2b5120cfd2075fa1cab9c71dedd588acce806c88d89f2f9a0c7bf20
- MD5 66cadca1fe900a12c7eff2f62851b72c
- SHA1 454321a8e99ceb8f8e77b01d57de8d8c369e0aa4
- SHA512 72a017f36e70bd72370008cbc3286414897560e8728f498bfd8a94008f18649ebfe931a4402a1057eaae03a2fd4898dd217dfddfd69f8d125dc554ba371e49f1
- SSDEEP 768:F/3ed1zZN/zoy0rtsGA4i2BIHRmibsa4BJs6dHqv+90:FvWbzooeOsi4a4xtqv+K
- TLSH T12543BA78AFD91572E377DEB9CAF6A1C3B972B0263D02580D40C247450D23F56EDA2A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_66cadca1fe900a12c7eff2f62851b72c_elex_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_66cadca1fe900a12c7eff2f62851b72c_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_66cadca1fe900a12c7eff2f62851b72c_elex_wannacry
- Size 58KB
- SHA256 adef4563e2b5120cfd2075fa1cab9c71dedd588acce806c88d89f2f9a0c7bf20
- MD5 66cadca1fe900a12c7eff2f62851b72c
- SHA1 454321a8e99ceb8f8e77b01d57de8d8c369e0aa4
- SHA512 72a017f36e70bd72370008cbc3286414897560e8728f498bfd8a94008f18649ebfe931a4402a1057eaae03a2fd4898dd217dfddfd69f8d125dc554ba371e49f1
- SSDEEP 768:F/3ed1zZN/zoy0rtsGA4i2BIHRmibsa4BJs6dHqv+90:FvWbzooeOsi4a4xtqv+K
- TLSH T12543BA78AFD91572E377DEB9CAF6A1C3B972B0263D02580D40C247450D23F56EDA2A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE