General
- Target 2026-08-02_bafa604d6578f93f9bceaf848cde7e79_elex_wannacry
- Size 404KB
- Sample260802-vk16zada62
- SHA256 2064d08ebdfd5d18af448a1cdc8272766325b11644f03087938ae90f4d9d573a
- MD5 bafa604d6578f93f9bceaf848cde7e79
- SHA1 451a65563969b5f537d9e3bae93f0520dec78fde
- SHA512 690fc760edc5f03469c2a2da2c2fb7ff89277b80136ec5c7ae14d0ca7d1cd864c7af88f82030e5c623c990d8253fb8635d5a69f7ea7a1150ebe74911c6178222
- SSDEEP 6144:d+0jTs/28r9N5IrPKsPmubNXLeKhqWBQSYV65vIooSR:d+3/28r9N5IBm+7eKJBZYE5gn
- TLSH T175949D31FD58C029C6E5CAB79E28CAF623B21CE4DD25DE4365E4731C8E327942E5CA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_bafa604d6578f93f9bceaf848cde7e79_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_bafa604d6578f93f9bceaf848cde7e79_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_bafa604d6578f93f9bceaf848cde7e79_elex_wannacry
- Size 404KB
- SHA256 2064d08ebdfd5d18af448a1cdc8272766325b11644f03087938ae90f4d9d573a
- MD5 bafa604d6578f93f9bceaf848cde7e79
- SHA1 451a65563969b5f537d9e3bae93f0520dec78fde
- SHA512 690fc760edc5f03469c2a2da2c2fb7ff89277b80136ec5c7ae14d0ca7d1cd864c7af88f82030e5c623c990d8253fb8635d5a69f7ea7a1150ebe74911c6178222
- SSDEEP 6144:d+0jTs/28r9N5IrPKsPmubNXLeKhqWBQSYV65vIooSR:d+3/28r9N5IBm+7eKJBZYE5gn
- TLSH T175949D31FD58C029C6E5CAB79E28CAF623B21CE4DD25DE4365E4731C8E327942E5CA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.