General
- Target 2026-08-02_417e3d0c49ea9297379e349eb5e7f648_elex_wannacry
- Size 532KB
- Sample260802-xhssxsen4y
- SHA256 101dc461699d4af59006b52ba7f96c466de054f68c397e3adfd4ca76ecfb7673
- MD5 417e3d0c49ea9297379e349eb5e7f648
- SHA1 3a370ece3de6d6f708af5ad105f057c95fff5279
- SHA512 463047707755e71e4f457899a5df34f32ab2bfb005e78a5e13cb145f8c69cc9ccf66728c82c34d0010f4d67e0aeeb02b20a7469f3533f026536a50b3fc7486ce
- SSDEEP 3072:Q94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQId:04sZBOZdjEYTPXMhaMP/kFTA7OAV
- TLSH T1C8C41C3406B18E04D463C3B42C950D955D691EF9CDF86796C707A0AE29BD3FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_417e3d0c49ea9297379e349eb5e7f648_elex_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_417e3d0c49ea9297379e349eb5e7f648_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_417e3d0c49ea9297379e349eb5e7f648_elex_wannacry
- Size 532KB
- SHA256 101dc461699d4af59006b52ba7f96c466de054f68c397e3adfd4ca76ecfb7673
- MD5 417e3d0c49ea9297379e349eb5e7f648
- SHA1 3a370ece3de6d6f708af5ad105f057c95fff5279
- SHA512 463047707755e71e4f457899a5df34f32ab2bfb005e78a5e13cb145f8c69cc9ccf66728c82c34d0010f4d67e0aeeb02b20a7469f3533f026536a50b3fc7486ce
- SSDEEP 3072:Q94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQId:04sZBOZdjEYTPXMhaMP/kFTA7OAV
- TLSH T1C8C41C3406B18E04D463C3B42C950D955D691EF9CDF86796C707A0AE29BD3FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory