General
- Target 2026-08-02_3ea9de1f836de412a073a9ed849e1857_elex_wannacry
- Size 532KB
- Sample260802-xkb8ysed45
- SHA256 17e36b73bdf720f85b19e0276a10e902bb9d87b354dd0b247f82b6a8a0fa1a9a
- MD5 3ea9de1f836de412a073a9ed849e1857
- SHA1 f0779ab28af3b8e4a065557e03721b7def28c462
- SHA512 83b54dddfe03cbf648fd10ff2f0bc9fb81ad76f6ab60139b1e44608c695fa03c847ff9831d5f1e1f0e6c48b12f0c7228b9d6f1c458b6b8be697201bffff8a5bc
- SSDEEP 3072:Q94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQqq:04sZBOZdjEYTPXMhaMP/kFTA7OAc
- TLSH T1B2C41C3406B18E04D463C3B42C950D955D691EF8CDF86796C707A0AE29BD7FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_3ea9de1f836de412a073a9ed849e1857_elex_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_3ea9de1f836de412a073a9ed849e1857_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_3ea9de1f836de412a073a9ed849e1857_elex_wannacry
- Size 532KB
- SHA256 17e36b73bdf720f85b19e0276a10e902bb9d87b354dd0b247f82b6a8a0fa1a9a
- MD5 3ea9de1f836de412a073a9ed849e1857
- SHA1 f0779ab28af3b8e4a065557e03721b7def28c462
- SHA512 83b54dddfe03cbf648fd10ff2f0bc9fb81ad76f6ab60139b1e44608c695fa03c847ff9831d5f1e1f0e6c48b12f0c7228b9d6f1c458b6b8be697201bffff8a5bc
- SSDEEP 3072:Q94sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQqq:04sZBOZdjEYTPXMhaMP/kFTA7OAc
- TLSH T1B2C41C3406B18E04D463C3B42C950D955D691EF8CDF86796C707A0AE29BD7FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory